skills/udaysharmadev/skills/runway/Gen Agent Trust Hub

runway

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to interact with production environments by executing platform-specific CLI commands, including vercel, netlify, wrangler, docker, and kubectl for building and deploying applications.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads project-level configuration files (such as vercel.json, netlify.toml, and Dockerfile) to determine deployment strategies, creating a potential surface for indirect prompt injection from untrusted codebases.
  • Ingestion points: Workflow Step 1 in SKILL.md instructs the agent to read platform signals from various local configuration and manifest files.
  • Boundary markers: The skill uses a structured 'Output contract' and explicit workflow steps to maintain control over the deployment process.
  • Capability inventory: The agent has the capability to execute shell commands for builds, deployments, and rollbacks, as well as perform network requests for health checks and smoke tests.
  • Sanitization: The skill explicitly mandates that secret values must never be printed or echoed and should only be managed through the platform's native environment variable mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 08:07 PM
Security Audit — agent-trust-hub — runway