OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass2 providerslatest audit Mar 25, 2026
Independent checks from skills.sh's audit partners.
The skill provides legitimate documentation and code examples for uploading local files to RunwayML using official SDKs. It identifies an indirect prompt injection surface where user-provided strings are passed directly to generative models without sanitization.
Detected behaviors
No issues