happyhorse-1-0
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
runcomfyCLI tool to perform video generation tasks. User-provided prompts are encapsulated within a JSON object passed to the CLI, which prevents direct command injection. - [EXTERNAL_DOWNLOADS]: The instructions guide users to install the
@runcomfy/cliutility from npm and fetch the skill configuration from theagentspace-so/runcomfy-skillsrepository. These downloads are necessary for the skill's primary function and target the service's specific tools.
Audit Metadata