ai-image-generation
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of the
@runcomfy/clipackage from the npm registry for interacting with the image generation service. - [COMMAND_EXECUTION]: Uses the
runcomfyCLI tool to perform text-to-image and image-to-image operations. The skill correctly limits execution scope using theallowed-toolsconfiguration. - [PROMPT_INJECTION]: Identifies potential indirect prompt injection surfaces where external data (image URLs and web search) is processed by the AI models. • Ingestion points: External image URLs in
image_urls/imagesfields and web grounding viaenable_web_searchinSKILL.md. • Boundary markers: The documentation includes a "Security & Privacy" section with explicit instructions for agents to treat external reference assets as untrusted content. • Capability inventory: The agent's capabilities are restricted to executing theruncomfycommand. • Sanitization: All user-provided prompts are encapsulated within a JSON object and passed to the CLI via the--inputflag, effectively neutralizing shell injection risks.
Audit Metadata