Versioned security assessment

Report ID: SA-8D5E626C

6/28/2026, 6:06:11 AM

image-to-video security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
image-to-video
Version
v2
Maintainer
agentspace-so
Source
github.com/agentspace-so/runcomfy-agent-skills/tree/main/image-to-video/
Coverage
1 Files scanned · 206 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The static analyzer reported many command, network, filesystem, and blocker patterns. Review found no malicious intent or prompt injection, but the skill intentionally invokes the RunComfy CLI, sends user media references to RunComfy services, and writes generated files locally. Most high-severity static alerts were markdown, placeholder URL, or model-name false positives.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 206 Lines analyzed

3 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 4 evidence locations

Filesystem access

May read or write local files.

Observed in 5 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 5 evidence locations

Capability review items (3)
Medium
SKILL.md:48-50SKILL.md:74-80SKILL.md:113-121SKILL.md:155-164SKILL.md:197
Third-Party CLI Execution
The skill instructs users to install and run the RunComfy CLI. This is legitimate for the skill purpose, but it executes local commands and requires trust in the CLI package and account authentication.
The command examples and explanation directly show local RunComfy CLI execution. The usage is intentional and documented, with no evidence of shell expansion of user prompts.
Medium
SKILL.md:17SKILL.md:197SKILL.md:203-204
Outbound Media Processing Through RunComfy
The skill sends prompts and media URLs to RunComfy model APIs and downloads generated outputs. Users should treat source media, prompts, and generated results as data shared with a third-party service.
The skill explicitly describes API submission, polling, remote media fetching, and download endpoints. This confirms network transfer, but it matches the advertised video generation behavior.
Medium
SKILL.md:80SKILL.md:121SKILL.md:164SKILL.md:201SKILL.md:205
Local Token and Output File Handling
The skill documents local token storage and output directory writes. These are normal CLI behaviors, but they affect credential handling and local disk usage.
The file paths and token storage are documented directly. The token location uses owner-only permissions, so the risk is operational rather than evidence of malicious file access.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (2)
Low
SKILL.md:77SKILL.md:117SKILL.md:159-161
Path Traversal Alerts Are Placeholder URL False Positives
The analyzer flagged path traversal on example values that use abbreviated HTTPS URLs. These are documentation placeholders for media inputs, not local relative path traversal.
The lines are inside fenced command examples and contain HTTPS placeholder media URLs. No local file path concatenation or traversal sink is present in the reviewed file.
Low
SKILL.md:4SKILL.md:64SKILL.md:103SKILL.md:108SKILL.md:180-182
Weak Cryptography and Reconnaissance Alerts Are False Positives
The blocker alerts appear to match markdown terms, prompt fields, model notes, or exit-code documentation. No cryptographic implementation or system reconnaissance command is present.
The cited lines describe YAML front matter, model prompt fields, negative prompts, and documentation headings. I found no hashing, encryption, host probing, or system inventory behavior.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable