Skills happyhorse-1-0

📦

happyhorse-1-0

Name: happyhorse-1-0
Author: agentspace-so

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Generate HappyHorse Videos on RunComfy

Video teams need a repeatable way to turn prompts into short AI videos. This skill guides Claude, Codex, or Claude Code through the HappyHorse 1.0 RunComfy workflow.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "happyhorse-1-0" from https://skillstore.io/skills/agentspace-so-happyhorse-1-0.md and its manifest at https://skillstore.io/api/skills/agentspace-so-happyhorse-1-0/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/agentspace-so-happyhorse-1-0.md Signed manifest GET /api/skills/agentspace-so-happyhorse-1-0/manifest Signed lockfile GET /api/skills/agentspace-so-happyhorse-1-0/lockfile

Test it

Using "happyhorse-1-0". Generate a 5 second landscape clip of a courier crossing a rainy street at night.

Expected outcome:

A RunComfy job is submitted for a 16:9 1080P HappyHorse clip. The output folder contains the generated video and result details.

Using "happyhorse-1-0". Create a vertical cafe ad with steam, morning light, and soft ambient sound.

Expected outcome:

The skill prepares a 9:16 prompt, requests an 8 second video, disables the watermark, and saves the downloaded media to the chosen folder.

Using "happyhorse-1-0". Compare two short test prompts for a product reveal sequence.

Expected outcome:

Two 720P test clips are generated with the same seed, followed by a concise comparison of motion quality and audio fit.

Security Audit

Medium Risk

v9 • 7/9/2026 Open versioned report

The skill has expected external-command and network behavior because it runs the RunComfy CLI to submit video jobs. Most static hits are false positives from Markdown backticks and ellipsis in documentation, but CLI execution and bearer-token API submission remain confirmed risks. No evidence found of prompt injection text in the skill file.

Files scanned

196

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:179 SKILL.md:192

Third-Party Prompt and Token Transmission

The skill documents that the CLI posts to the RunComfy Model API with the user bearer token and sends the prompt through the CLI input boundary. This is required for the workflow, but users should treat prompts and credentials as third-party data exposure.

The documentation explicitly states that requests use the user bearer token and that user prompts are passed through the CLI to the Model API. The behavior is transparent, but the data-flow risk is real.

Capability review items (10)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:10

Ruby/shell backtick execution

Calls `runcomfy run happyhorse/happyhorse-1-0/text-to-video` through

The skill explicitly says it calls the local RunComfy CLI. This is expected behavior, but it is still local external command execution against a third-party service.

Medium

SKILL.md:24-26

Ruby/shell backtick execution

```bash

The fenced setup example includes an npx install command that installs a skill globally from a GitHub source. Running installer commands from community documentation is a real external command risk.

Medium

SKILL.md:44-45

Ruby/shell backtick execution

1. **RunComfy CLI** — `npm i -g @runcomfy/cli`

The prerequisite instructs users to run npm to install the RunComfy CLI globally. This is expected setup, but it executes package-manager code on the local machine.

Medium

SKILL.md:45-46

Ruby/shell backtick execution

2. **RunComfy account** — `runcomfy login` opens a browser device-code flow.

The prerequisite instructs users to run the RunComfy login command. The command initiates authentication and can affect local credential state.

Medium

SKILL.md:65-69

Ruby/shell backtick execution

```bash

The example runs the RunComfy CLI with user-supplied prompt content and writes outputs to a local directory. Arguments are structured, but the command still executes locally and contacts a third-party API.

Medium

SKILL.md:73-82

Ruby/shell backtick execution

```bash

The vertical video example runs the RunComfy CLI and disables the watermark option. It is a legitimate workflow, but it remains local command execution with network submission.

Medium

SKILL.md:86-90

Ruby/shell backtick execution

```bash

The cheaper test example runs the RunComfy CLI with prompt input and output directory arguments. This confirms expected local command execution rather than a pure documentation-only skill.

Medium

SKILL.md:178-179

Ruby/shell backtick execution

1. The skill invokes `runcomfy run happyhorse/happyhorse-1-0/text-to-video` with a JSON body matchin

The implementation notes state that the skill invokes the RunComfy CLI with a JSON body. This directly confirms the external command behavior described by the skill.

Medium

SKILL.md:191

Ruby/shell backtick execution

- **Token storage**: `runcomfy login` writes the API token to `~/.config/runcomfy/token.json` with m

The security section references runcomfy login as the command that writes the API token. The command is legitimate setup, but it changes local credential state and should be treated as a real command risk.

Medium

SKILL.md:179

Hardcoded URL

2. The CLI POSTs to `https://model-api.runcomfy.net/v1/models/happyhorse/happyhorse-1-0/text-to-vide

The skill documents a hardcoded RunComfy Model API endpoint that receives the user bearer token. The endpoint is expected for this skill, but it is a real third-party network and credential transmission risk.

Risk Factors

⚙️ External commands (40)

🌐 Network access (4)

SKILL.md:14 SKILL.md:20 SKILL.md:174 SKILL.md:179

📁 Filesystem access (5)

SKILL.md:180 SKILL.md:181 SKILL.md:182 SKILL.md:191 SKILL.md:191

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/agentspace-so-happyhorse-1-0/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentspace-so-happyhorse-1-0/security.svg)](https://skillstore.io/skills/agentspace-so-happyhorse-1-0?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/agentspace-so-happyhorse-1-0?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentspace-so-happyhorse-1-0/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/agentspace-so-happyhorse-1-0.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

agentspace-so. (2026). happyhorse-1-0 security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/agentspace-so-happyhorse-1-0/audits/9

BibTeX citation

@techreport{agentspace-so-agentspace-so-happyhorse-1-0-2026,
  author = {agentspace-so},
  title = {happyhorse-1-0 security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/agentspace-so-happyhorse-1-0/audits/9},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "happyhorse-1-0 security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
  - name: "agentspace-so"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/agentspace-so-happyhorse-1-0/audits/9"
identifiers:
  - type: other
    value: "skillstore:agentspace-so-happyhorse-1-0:audit:9"
    description: "Skillstore immutable audit report identifier"

Compare variants

3 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

doany-ai Recommended

doany-ai-happyhorse-1-0

Skillstore Score 50

Evidence Confidence High

Skillstore usage 15

Updated

2026-08-21

agentspace-so Current

agentspace-so-happyhorse-1-0

Skillstore Score 50

Evidence Confidence High

Skillstore usage 7

Updated

2026-08-21

runcomfy-com

runcomfy-com-happyhorse-1-0

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 7

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Marketing Short Creation

Create vertical or widescreen product clips with prompt guidance for motion, audio, and brand consistency.

Prototype Video Concepts

Test cinematic ideas before committing production time or agency budget.

Multilingual Social Assets

Draft short videos from supported-language prompts for campaign review.

Try These Prompts

Generate a Basic Clip

Use HappyHorse 1.0 to create a 5 second 1080P 16:9 video. Prompt: [describe the action, camera, setting, and audio]. Save outputs to [folder].

Create a Vertical Short

Generate an 8 second 9:16 HappyHorse video with no watermark. Prompt: [vertical scene with motion, camera, and ambient sound]. Save it to [folder].

Compare Prompt Variants

Run two 3 second 720P HappyHorse tests with the same seed. Use these prompt variants: [variant A] and [variant B]. Summarize which result has better motion.

Plan a Multi-Shot Sequence

Create a 12 second HappyHorse clip with two shots. Keep this character anchor consistent: [character]. Include camera, action, and audio for each shot.

Best Practices

Describe visible motion over time, not only the scene.
State camera framing, duration, aspect ratio, and audio direction before generation.
Use short 720P tests before requesting longer 1080P clips.

Avoid

Using prompts longer than the documented 2,500 character limit.
Combining too many unrelated actions in one short clip.
Requesting unsupported aspect ratios, external audio driving, or image-to-video input through this endpoint.

Frequently Asked Questions

Does this skill generate video locally?

No. It uses the RunComfy CLI and hosted HappyHorse 1.0 endpoint.

What credentials are required?

A RunComfy login or RUNCOMFY_TOKEN is required before generation.

Can I use source images or videos?

Not with this text-to-video endpoint. Use another pipeline for image-to-video or video editing.

What video lengths are supported?

The documented duration range is 3 to 15 seconds.

Where are generated files saved?

The CLI downloads allowed RunComfy output URLs into the output directory you choose.

Which tools can use this skill?

It is marked compatible with Claude, Codex, and Claude Code.

Developer Details

Author

agentspace-so

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/agentspace-so/runcomfy-agent-skills/tree/main/happyhorse-1-0/

Ref

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

Maintenance freshness

7/18/2026

Usage

3 downloads · 47 views

File structure

📄 SKILL.md