This report does not block or authorize the manifest or ZIP.
The skill primarily documents a legitimate RunComfy text-to-video workflow, including expected CLI commands and outbound RunComfy API access. Most static hits are Markdown backticks, code fences, URL documentation, or ellipses in API paths rather than malicious behavior. The remaining confirmed issues are the intended external CLI and third-party network dependency, so users should install and run it only when they trust RunComfy and understand credential handling.
Report position
Historical report
Open audit history before using this report to install.
Audit attestation
Not attestable
The required immutable binding is incomplete.
Human verification
Not verified
No human verification is recorded for this report.
Coverage
1 Files scanned · 196 Lines analyzed
17 items shown for review
Limitations
This report does not claim runtime or sandbox execution and does not prove the absence of side effects.
01
Evidence chain
Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.
Calls `runcomfy run happyhorse/happyhorse-1-0/text-to-video` through
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
3. **CI / containers** — set `RUNCOMFY_TOKEN=<token>` instead of `runcomfy login`.
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
The CLI submits, polls every 2s until terminal, then downloads any `*.runcomfy.net` / `*.runcomfy.co
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
1. The skill invokes `runcomfy run happyhorse/happyhorse-1-0/text-to-video` with a JSON body matchin
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
2. The CLI POSTs to `https://model-api.runcomfy.net/v1/models/happyhorse/happyhorse-1-0/text-to-vide
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
3. The Model API returns a `request_id`; the CLI polls `GET .../requests/<id>/status` every 2 second
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
4. On terminal status, the CLI fetches `GET .../requests/<id>/result` and downloads any URL whose ho
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
5. `Ctrl-C` while polling sends `POST .../requests/<id>/cancel` so you don't get billed for GPU you
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
- **Token storage**: `runcomfy login` writes the API token to `~/.config/runcomfy/token.json` with m
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
- **Input boundary**: the user prompt is passed as a JSON string to the CLI via `--input`. The CLI d
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
- **Outbound endpoints**: only `model-api.runcomfy.net` (request submission) and `*.runcomfy.net` /
The skill intentionally instructs use of the RunComfy CLI or documents its credential and network behavior. This is legitimate for the feature, but it is still external command execution with third-party service access.
2. The CLI POSTs to `https://model-api.runcomfy.net/v1/models/happyhorse/happyhorse-1-0/text-to-vide
The skill documents a real outbound HTTPS request to the RunComfy Model API using the user bearer token. This is expected for the video generation workflow but remains third-party network access.
03
Risk findings
Confirmed security concerns are separated from items that still need review.
No confirmed security findings were recorded for this completed audit.
04
Remediation
Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.
FIX-001
Medium
External CLI execution is central to the skill.
Tell users to review the RunComfy CLI package before installation and run commands only in trusted environments.
FIX-002
Low
Prompts and job metadata are sent to a third-party API.
Warn users not to include secrets, private customer data, or unreleased content in prompts unless their RunComfy account and policies permit it.
FIX-003
Low
Credential storage depends on the local RunComfy CLI.
Recommend RUNCOMFY_TOKEN for CI and confirm local token files use owner-only permissions.
05
Expert evidence
Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.
Artifact subject
Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable
Analysis metadata
Audit model: claude
Analysis state: Complete
Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.