image-to-video
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
runcomfyCLI to run video generation models. - Commands use the
--inputflag with JSON-formatted strings, which prevents shell expansion of user-provided content. - The execution is limited to the vendor's official command-line tool as per the skill's primary purpose.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@runcomfy/cliNode.js package. - This dependency is the official tool for the platform and is retrieved from the standard NPM registry.
- [SAFE]: The skill demonstrates secure handling of sensitive data and credentials.
- It identifies standard configuration paths for authentication tokens and promotes the use of environment variables for secure token management in automated environments.
Audit Metadata