The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user prompts and external URLs (images, audio) to generate video content.
Ingestion points: User-provided prompt strings and remote asset URLs (image_url, audio_url) are passed to the runcomfy tool in SKILL.md.
Boundary markers: Inputs are encapsulated in a JSON structure (--input '{...}') before being passed to the CLI, which reduces shell injection risks.
Capability inventory: The skill uses the runcomfy CLI tool to perform network operations and write generated files to the local file system (--output-dir).
Sanitization: The skill relies on the runcomfy CLI and backend service for content safety and input validation; no specific local sanitization of prompt text is performed by the skill itself beyond JSON structure.
[EXTERNAL_DOWNLOADS]: The skill facilitates the installation and use of the @runcomfy/cli Node.js package and communicates with official runcomfy.com and runcomfy.net domains. These resources are provided by the author runcomfy-com and represent standard vendor functionality for the service described.

ai-video-generation