comfyui-import
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a documentation and conversion tool that maps ComfyUI nodes to pipeline stages. It operates on user-provided JSON files and writes documentation to the local workspace.
- [EXTERNAL_DOWNLOADS]: The skill extracts and documents GitHub repository URLs for ComfyUI custom nodes and download URLs for model checkpoints. These are used for workflow reproducibility and refer to well-known community resources.
- [PROMPT_INJECTION]: A surface for indirect prompt injection exists because the skill ingests untrusted ComfyUI JSON data and uses it to generate pipeline specifications.
- Ingestion points: ComfyUI workflow JSON files (SKILL.md)
- Boundary markers: None specified.
- Capability inventory: File system writing to the local workspace (SPEC.md, manifest.md, workflow.json).
- Sanitization: None specified.
Audit Metadata