comfyui-character-gen
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input (character descriptions and scene prompts) which is processed by the agent to generate ComfyUI workflows and execute scripts.
- Ingestion points: User prompts for character generation and test case data in
eval/test-cases.yaml. - Boundary markers: Absent. The instructions do not define delimiters or specific warnings to ignore instructions embedded within user-provided content.
- Capability inventory: The skill includes Python scripts (
references/talking-head-workflows.md) usingsubprocess.runand an evaluation script (eval/run-eval.sh) that executes theclaudeCLI. - Sanitization: Absent. User input is used to form prompts and command-line arguments without visible validation or escaping.
- [COMMAND_EXECUTION]: Scripts provided within the skill execute external shell commands and system tools.
eval/run-eval.shexecutes theclaudeCLI along with standard utilities likegrep,wc,python3, andnodeto manage evaluation tasks.references/talking-head-workflows.mdcontains Python scripts that usesubprocess.runto call external inference scripts for audio and video processing, such asinference.pyandinference_codeformer.py.- [EXTERNAL_DOWNLOADS]: The skill provides comprehensive instructions for downloading third-party code and large-scale models from external sources.
- References numerous GitHub repositories, HuggingFace repositories, and Civitai models.
- Provides explicit commands for
git cloneandpip installtargeting external repositories including SadTalker, LivePortrait, and Wav2Lip. - References established research organizations and technology companies in the AI ecosystem.
Audit Metadata