comfy-build-pins
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents a workflow for aggregating and resolving external dependency files which could potentially contain malicious instructions if sourced from untrusted third-party repositories.
- Ingestion points: The skill reads
requirements.txtandpyproject.tomlfiles from core and custom node repositories (SKILL.md). - Boundary markers: No boundary markers or specific delimiters are used when concatenating these external files into
declared.txt. - Capability inventory: The skill utilizes
git cloneto fetch external content,catto read files, anduv pip compileto resolve dependencies. - Sanitization: No sanitization of the requirement file content is performed before resolution, as the process relies on the underlying package manager's validation.
Audit Metadata