skills/doany-ai/skills/image-to-video/Gen Agent Trust Hub

image-to-video

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the runcomfy run command to interface with the RunComfy API, which is the standard and intended method of operation for this tool.
  • [EXTERNAL_DOWNLOADS]: The skill fetches generated content from official RunComfy domains (*.runcomfy.net and *.runcomfy.com). These are trusted service endpoints for this skill's context.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided URLs for images and media. While this is an inherent surface for indirect prompt injection, the skill uses structured JSON parameters to pass data to the CLI, effectively isolating the input from the shell execution environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:03 PM