The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill specifies the installation of the @runcomfy/cli package from the NPM registry. This package is owned by the vendor (runcomfy-com) and is essential for the skill's operations.
[COMMAND_EXECUTION]: The skill utilizes Bash(runcomfy *) to execute CLI commands for logging in and running relighting models. These commands are restricted to the vendor's toolset.
[INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes external images.
1. Ingestion points: The skill takes image URLs as input in SKILL.md.
1. Boundary markers: The skill includes documentation advising agents to only use user-provided URLs, though no structural boundaries are present in the prompt instructions.
1. Capability inventory: Commands in SKILL.md use the runcomfy CLI to perform network-based image transformations.
1. Sanitization: Inputs are encapsulated in JSON within the CLI call to mitigate shell injection, though the model remains vulnerable to instructions embedded in input assets.

relight