runpod-companion-clis
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches configuration and official CLI tools from well-known technology services and official providers, including AWS (awscli.amazonaws.com), GitHub (cli.github.com), and Hugging Face (hf.co). It also includes an optional community-maintained utility from a public GitHub repository (github.com/justinwlin/Runpod-Network-Volume-Storage-Tool.git) using git clone.- [REMOTE_CODE_EXECUTION]: Downloads and executes the official Hugging Face CLI installer script directly from their domain (hf.co). It also involves running local scripts and managing dependencies via 'uv sync' for the optional community utility.- [COMMAND_EXECUTION]: Provides instructions for executing various shell commands to build Docker images, manage GitHub repositories, and synchronize data with S3 storage.- [PRIVILEGE_ESCALATION]: Instructs the user to use administrative privileges (sudo or PowerShell Administrator) to install system-level components like WSL2 and system-wide CLI binaries.- [INDIRECT_PROMPT_INJECTION]: The skill defines logic for processing external ComfyUI workflows, which creates an attack surface for instructions embedded within those files.
- Ingestion points: ComfyUI workflows referenced in SKILL.md.
- Boundary markers: None mentioned.
- Capability inventory: Extensive file and network operations through four integrated CLIs.
- Sanitization: No sanitization steps described for external file contents.
Audit Metadata