comfyui-video
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The automation script
scripts/batch_scenes.jsallows for indirect prompt injection by interpolating user-provided scene descriptions directly into ComfyUI's text encoding nodes. - Ingestion points: User-supplied scene configuration passed to the
configureScenefunction inscripts/batch_scenes.js. - Boundary markers: Absent; user input is directly assigned to node widget values.
- Capability inventory: The script can modify properties of any node in the active ComfyUI graph, including prompts, scheduler steps, and output filenames.
- Sanitization: None; input is treated as raw text for the workflow nodes.
- [COMMAND_EXECUTION]: The documentation in
SKILL.mdprovides several examples for monitoring generation progress and verifying outputs that encourage the user to execute shell commands via SSH as therootuser. This promotes a practice of using excessive privileges for routine file system and process monitoring tasks.
Audit Metadata