The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Bash tool to interact with the runcomfy CLI. The execution scope is strictly limited using the allowed-tools frontmatter field to runcomfy *, which prevents the execution of unauthorized or arbitrary shell commands.
[EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing the @runcomfy/cli tool via the official NPM registry. This is a standard and expected dependency for the service's primary function. The skill explicitly warns against using unverified remote installation scripts.
[CREDENTIALS_UNSAFE]: The skill describes the default local storage location for API tokens (~/.config/runcomfy/token.json) and the use of the RUNCOMFY_TOKEN environment variable. This is documented for configuration purposes and follows standard security practices, such as suggesting restricted file permissions (0600).
[DATA_EXFILTRATION]: The skill facilitates the download of generated audio content from *.runcomfy.net and *.runcomfy.com domains. The documentation specifies these as the only expected outbound endpoints, and the CLI implements a file size cap to mitigate potential resource exhaustion.

elevenlabs-music-generation