comfy-imagegen
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of CLI tools via
uv runanduv tool. This includes generation commands (comfy-imagegen), gallery management (comfy-media), and setup utilities (comfy-tools-setup). These are standard execution patterns for local AI agent skills. - [EXTERNAL_DOWNLOADS]: The skill utilizes a dedicated utility,
comfy-model-downloader, to fetch AI model weights (checkpoints, LoRAs, and VAEs) to/mnt/models/comfyui. It also references remote API services for Grok Imagine and Atlas Cloud, which are documented features for non-local generation. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text prompts and input images through CLI arguments. While this represents an attack surface for indirect prompt injection, the skill uses standard quoting and parameterization for the
comfy-imagegencommands. - Ingestion points: User-provided prompts and image paths passed via
--promptand--inputflags inSKILL.md. - Boundary markers: None explicitly defined in the instruction text; however, the CLI tools use standard shell argument delimiters.
- Capability inventory: The skill has the ability to execute shell commands (
uv run), write output files to theoutputs/directory, and perform network requests to specific AI provider APIs. - Sanitization: The skill instructions do not specify sanitization logic, relying on the underlying
comfy-imagegenCLI to handle string inputs safely.
Audit Metadata