gpt-image-edit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required workflow, the runtime ingests outsider-authored free text via the user-supplied prompt field sent to the runcomfy run openai/gpt-image-2/edit endpoint (and the workflow does not require selecting a specific pre-existing item before consuming that text).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill requires user-supplied HTTPS image URLs (e.g., "https://.../portrait.jpg") which are fetched by the RunComfy model server at runtime and can directly influence model behavior (image-based prompt-injection), so these external image URLs are runtime dependencies that can control prompts.