Gap Details
Type: missing
File: skills/aw-author/references/frontmatter-schema.md
Section: Near the checkout: field (Core GitHub Actions Fields)
Current Content
No run-install-scripts: field exists in the schema reference.
Expected Content
### `run-install-scripts`
- **Type:** boolean
- **Required:** no
- **Default:** `false`
- **Description:** Allow npm pre/post install scripts to execute during package installation.
By default, gh-aw adds `--ignore-scripts` to all generated `npm install` commands to prevent supply chain attacks via malicious install hooks. Setting this to `true` disables that protection globally.
```yaml
run-install-scripts: true
⚠️ Security notice: Emits a supply chain security warning at compile time. In strict mode, this is a compile error.
Per-runtime scope: Use runtimes.node.run-install-scripts: true to limit the opt-out to a specific runtime rather than all runtimes.
## Source
PR #26607 in github/gh-aw: [Sync github-agentic-workflows.md with v0.68.3](https://github.com/github/gh-aw/pull/26607)
## Intelligence Report
https://github.com/zircote/github-agentic-workflows/discussions/24
---
_Automated by /aw-daily on 2026-04-16_
Gap Details
Type: missing
File:
skills/aw-author/references/frontmatter-schema.mdSection: Near the
checkout:field (Core GitHub Actions Fields)Current Content
No
run-install-scripts:field exists in the schema reference.Expected Content
Per-runtime scope: Use
runtimes.node.run-install-scripts: trueto limit the opt-out to a specific runtime rather than all runtimes.