gpt-image-2
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
runcomfyCLI for model operations. It specifies that user input is passed as a JSON string to mitigate shell injection risks. - [EXTERNAL_DOWNLOADS]: Requires the installation of
@runcomfy/clifrom the official NPM registry and fetches the skill from theagentspace-so/runcomfy-skillsGitHub repository. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its ingestion of user-provided prompts and external image URLs. The documentation specifically warns about image-based prompt injection risks. All Category 8 requirements are met: ingestion points are identified in the prompt and images fields; boundary markers are noted at the CLI level but absent at the prompt level; capabilities include CLI execution and file writes; sanitization is performed by the CLI to prevent shell injection.
- [CREDENTIALS_UNSAFE]: The skill manages authentication tokens by storing them in
~/.config/runcomfy/token.jsonor via theRUNCOMFY_TOKENenvironment variable. It correctly advises setting restrictive file permissions (mode 0600) for local token storage.
Audit Metadata