comfy-motion-track-control
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several local command-line tools using
uv runto perform video generation, model management, and media indexing. These tools (comfy-videogen,comfy-models,comfy-media) are consistent with the vendor's provided tools for this workflow. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided prompts and file paths that are incorporated into shell command arguments.
- Ingestion points: User prompt and input file paths in
SKILL.md. - Boundary markers: No specific delimiters or safety warnings for input interpolation are provided in the instructions.
- Capability inventory: The skill uses
uv runto execute subprocesses for video generation and media management. - Sanitization: No explicit sanitization or validation of the user-provided prompt string is described.
Audit Metadata