runway

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but it is not a direct Runway integration. It routes credentials and content through Pixazo’s gateway, stores the API key in a local file, and promotes wildcard installation of more skills. Main risk is third-party credential/data routing plus transitive trust, not confirmed malware.

Confidence: 92%Severity: 76%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Frunway%2F@761ded718d4b5d792b042835823edd6b35079ae657f36fdb7c0c02fa46c6b63b