The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the runcomfy CLI via a Bash tool constrained to the runcomfy * pattern. This is an expected and legitimate use of the tool for its stated purpose.
[EXTERNAL_DOWNLOADS]: The skill documents the installation of the @runcomfy/cli package from npm, a well-known and trusted package registry. It also references official documentation and resources on runcomfy.com and skills.sh, which are trusted vendor domains.
[CREDENTIALS_UNSAFE]: The skill correctly advises users to manage sensitive tokens using environment variables (RUNCOMFY_TOKEN) or standard configuration files with restricted permissions, which is a security best practice.

image-inpainting