runapi-cli
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the RunAPI CLI via Homebrew or a shell script downloaded from
runapi.ai. The instructions explicitly recommend inspecting the script (less runapi-install.sh) before execution, which is a security best practice. - [COMMAND_EXECUTION]: The skill documents various CLI commands for authentication, model execution, and account management. It specifically advises against passing secrets in command-line arguments and recommends using environment variables (
RUNAPI_API_KEY) or stdin instead to prevent exposure in shell history. - [REMOTE_CODE_EXECUTION]: While the skill contains commands to download and execute a script (
sh runapi-install.sh), these are directed toward the user for manual installation of the CLI tool from its official vendor domain. The instructions include a mention of SHA-256 checksum verification within the installer to ensure integrity.
Audit Metadata