Versioned security assessment

Report ID: SA-9C678F76

6/28/2026, 5:34:46 AM

wan-2-7 security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
wan-2-7
Version
v2
Maintainer
agentspace-so
Source
github.com/agentspace-so/runcomfy-agent-skills/tree/main/wan-2-7/
Coverage
1 Files scanned · 186 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Low

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported many high-risk patterns, but most are false positives from Markdown backticks, endpoint documentation, and ordinary prose. The confirmed risk is that the skill intentionally invokes the RunComfy CLI, sends prompts and optional media URLs to RunComfy over HTTPS, and documents local token storage, so publication should include a network and credential-handling warning.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 186 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 6 evidence locations

Filesystem access

May read or write local files.

Observed in 4 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 5 evidence locations

Capability review items (3)
Medium
SKILL.md:66-70SKILL.md:74-83SKILL.md:177SKILL.md:184
External Model API Invocation
The skill instructs the assistant to run the RunComfy CLI for Wan 2.7 video generation. This is intended behavior, but it sends user prompts and optional audio or media URLs to an external RunComfy model service.
The CLI command and outbound RunComfy endpoint are explicitly documented. The behavior appears legitimate for this skill, but it is a real third-party data transfer risk.
Medium
SKILL.md:43-45SKILL.md:181
Credential Storage and Environment Token Guidance
The skill documents RunComfy authentication through browser login or RUNCOMFY_TOKEN. It also states that login writes an API token to a hidden config path in the user home directory.
The token location and environment-variable option are directly described in the skill. This is normal CLI credential handling, but users must protect the token.
Low
SKILL.md:78
Path Traversal Alert Is Placeholder URL Text
The path traversal finding points to an example audio URL placeholder. It does not instruct filesystem traversal and is not used as a local path.
Line 78 is an HTTPS audio_url example with ellipsis text. There is no file-read operation or traversal sequence applied to the local filesystem.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Low
SKILL.md:39
System Reconnaissance Alert Is Model Routing Guidance
The system reconnaissance finding points to a sentence telling the assistant when to route requests to this model. It does not collect host, user, process, or network information.
The cited line is plain routing guidance inside the skill instructions. No reconnaissance command or environment inspection is present.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (2)
Low
SKILL.md:7SKILL.md:10SKILL.md:23-25SKILL.md:49-60SKILL.md:66-70SKILL.md:74-83SKILL.md:87-95SKILL.md:177
Static Command Execution Alerts Are Markdown Examples
The static analyzer flagged many backtick and shell-command patterns. Review found these are Markdown inline code, tables, and fenced examples for the documented RunComfy workflow, not embedded executable Ruby or hidden script code.
The file is Markdown and contains no Ruby source or executable helper files. The flagged lines are documentation examples or inline command names.
Low
SKILL.md:4SKILL.md:112SKILL.md:162
Weak Cryptography Alerts Are False Positives
The static analyzer reported weak cryptographic algorithm blockers, but the cited lines contain frontmatter prose, anti-pattern text, and an exit-codes heading. No cryptographic operation or hashing algorithm use was found in the skill file.
The cited locations do not contain crypto code or algorithm selection. The signal appears to come from substring matching in ordinary Markdown text.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable