Versioned security assessment

Report ID: SA-181FDEFC

7/23/2026, 9:20:35 AM

video-extend security assessment v5

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: codex Latest published report
Skill name
video-extend
Version
v5
Maintainer
agentspace-so
Source
github.com/agentspace-so/runcomfy-agent-skills/tree/main/video-extend/
Coverage
1 Files scanned · 156 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Highest confirmed finding severity

High

2 confirmed security findings require attention.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

All 52 static findings are false positives caused by Markdown formatting, expected documentation links, a documented credential path, and unrelated phrase matches. However, the documented command embeds user-controlled URL and prompt values in single-quoted JSON without a shell-safe construction method, creating a plausible command-injection path. The workflow also transfers user media to RunComfy for external processing.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Active attestation

A public attestation is available for this exact report.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 156 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 19 evidence locations

Filesystem access

May read or write local files.

Observed in 1 evidence location

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 29 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 High
SKILL.md:71-77SKILL.md:141
User Input Can Break Shell Quoting
The documented invocation embeds the video URL and prompt in a single-quoted shell argument. An apostrophe in either value can terminate the argument and introduce additional shell syntax unless the agent applies escaping that the skill does not define.
Lines 71-77 show the values inside single shell quotes, while line 141 claims safety without documenting shell-level escaping. Exploitation depends on how the agent substitutes user values.
RISK-002 Low
SKILL.md:135
External Processing of User Media
The CLI sends the source video URL and continuation prompt to the RunComfy Model API, then downloads the generated clip. Sensitive media or signed URLs may be disclosed to an external processor.
Line 135 explicitly states that the CLI posts the video URL and prompt to the RunComfy Model API and polls for the result.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    User-controlled video URLs and prompts are shown inside a single-quoted shell argument without an escaping procedure.
    Construct the input with a structured serializer and pass it without shell interpolation. Document and test apostrophes, newlines, and shell metacharacters.
  2. FIX-002
    Low
    The source video URL and continuation prompt are processed by an external service.
    Disclose the external transfer before execution and require user approval for sensitive, private, or access-controlled media.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
181fdefcafd96b041926e61c4b2e306ca7e7820e
Content hash
241753d4947fda79f782d972b5014cdb34105c661ff31c018f8106e83656f1d2
Tree hash
d7e59a00358183000fb8c525eee8084f47f52de8a4db25e5ac65cbbdcfea26ca
Skill path
skills/agentspace-so/video-extend
Audit payload hash
6635e7fb69c3b4598868af0f55936cb1

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report Signed attestation CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: active