Skills
skills/agentspace-so/runcomfy-skills/happyhorse-1-0/Gen Agent Trust Hub

happyhorse-1-0

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the runcomfy CLI tool. It passes user input to the command as a JSON-formatted string, which prevents shell command injection.
  • [EXTERNAL_DOWNLOADS]: The skill automatically downloads generated assets, but restricts this action to the vendor's official domains (runcomfy.net and runcomfy.com).
  • [CREDENTIALS_UNSAFE]: The skill manages authentication tokens by reading from ~/.config/runcomfy/token.json or environment variables. It specifies that the local configuration file is protected with owner-only access permissions (0600).
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 09:25 AM