The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @runcomfy/cli package via NPM. This is an official package provided by the skill's author (runcomfy-com) and is necessary for the skill's primary function.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of video files and prompts. The author has proactively documented this risk and provided mitigations.
Ingestion points: The video_url and prompt parameters passed to the runcomfy run command in SKILL.md.
Boundary markers: The documentation specifies that inputs are passed as a JSON string to the CLI to prevent shell expansion of prompt content.
Capability inventory: The skill uses the runcomfy CLI tool to execute remote video processing, which involves network requests to *.runcomfy.net and writing output files to the local file system.
Sanitization: The CLI treats the prompt as data within a JSON structure, avoiding direct shell execution of untrusted text strings.

video-inpainting