report-bug
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for the agent to inform users that the
comfyui-mcpproject is archived and no longer accepts bug reports. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle user-reported defects and software errors, which constitutes an ingestion point for potentially untrusted data. However, it explicitly mitigates risks by instructing the agent to 'Scrub secrets before anything leaves the machine' and limiting its response to providing information about the project's archived status and official alternatives.
- [EXTERNAL_DOWNLOADS]: The skill includes references to official documentation and source code repositories hosted on
comfy.organdgithub.com/Comfy-Org. These are well-known services and the URLs are provided for informational purposes, posing no security risk.
Audit Metadata