comfyui-retro-anime
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes natural-language user requests to generate prompts for images, sound effects, and voices.
- Ingestion points: User-provided character descriptions (gender, race, physical traits) and scene clauses are ingested in the parsing step described in
SKILL.md. - Boundary markers: The global prompt template does not utilize specific delimiters (e.g., XML tags or triple quotes) to isolate user-provided descriptions from the static prompt instructions, which could allow a user to influence the downstream generation model's behavior.
- Capability inventory: The skill identifies as a prompt generator and does not contain scripts or instructions for file system access, network operations, or command execution; it outputs structured text for ComfyUI nodes.
- Sanitization: No explicit sanitization or validation logic is defined to filter or escape potentially disruptive instructions within user-provided descriptions before they are inserted into the final prompt output.
Audit Metadata