image-to-video
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
runcomfy runcommand to interface with the RunComfy API, which is the standard and intended method of operation for this tool. - [EXTERNAL_DOWNLOADS]: The skill fetches generated content from official RunComfy domains (
*.runcomfy.netand*.runcomfy.com). These are trusted service endpoints for this skill's context. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided URLs for images and media. While this is an inherent surface for indirect prompt injection, the skill uses structured JSON parameters to pass data to the CLI, effectively isolating the input from the shell execution environment.
Audit Metadata