comfy-debug
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill advises the agent to follow the 'hint' and 'details' fields in CLI error envelopes as authoritative sources for fixes. This creates a surface for indirect prompt injection if an attacker-controlled input (such as a malicious workflow name or node comment) triggers a specific error that reflects the input back into the hint, potentially influencing the agent's behavior.
- Ingestion points: The
error.hint,error.code, anddetailsfields from CLI JSON output processed in SKILL.md. - Boundary markers: None specified in the instructions.
- Capability inventory: Execution of
comfyCLI commands (server management, cloud operations) and localpython3execution. - Sanitization: No sanitization or filtering logic is described for the tool output.
- [COMMAND_EXECUTION]: The skill provides numerous examples of legitimate troubleshooting commands for the comfy CLI and a static Python snippet for JWT decoding, which are consistent with the intended debugging purpose.
- [SAFE]: The domain
fe-pr-NNNNN.testenvs.comfy.organd othercomfy.orgreferences are vendor-controlled resources used for development environments.
Audit Metadata