comfy-videogen
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
uv runcommand to execute localized CLI tools includingcomfy-videogen,comfy-media, andcomfy-model-downloader. These commands are used for generating video content, managing local media galleries, and initializing model checkpoints. - [EXTERNAL_DOWNLOADS]: The instructions reference
comfy-model-downloaderto fetch required model weights (e.g., LTX 2.3 variants) to the/mnt/models/comfyuidirectory. This is presented as a standard setup procedure for local inference. - [PROMPT_INJECTION]: The skill accepts user-defined text strings via the
--promptflag for video generation. This constitutes a standard input surface for indirect prompt injection, which is inherent to the skill's primary purpose of text-to-video synthesis.
Audit Metadata