📦
controlnet-pose
79Create Pose-Controlled Images and Videos
Pose and motion control workflows can be hard to route across image and video models. This skill selects the right RunComfy path and prepares clear CLI guidance.
Design & Creative View
Skills happyhorse-1-0
📦
happyhorse-1-0
Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access
Create HappyHorse 1.0 Videos with RunComfy
Video creators need reliable prompts and settings for HappyHorse 1.0 without guessing the API schema. This skill prepares RunComfy CLI calls and practical prompt guidance for text-to-video generation.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "happyhorse-1-0" from https://skillstore.io/skills/doany-ai-happyhorse-1-0.md and its manifest at https://skillstore.io/api/skills/doany-ai-happyhorse-1-0/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "happyhorse-1-0". A vertical cafe product shot with steam, morning light, and soft ambient sound.
Expected outcome:
The skill selects a vertical format, suggests an eight second duration, and frames the prompt around motion, texture, and sound.
Using "happyhorse-1-0". A two-shot story where the same astronaut crosses a lunar plain and looks back at Earth.
Expected outcome:
The skill repeats the astronaut identity across both shots and recommends consistent costume, camera distance, lighting, and audio cues.
Using "happyhorse-1-0". A user asks for lip-sync driven by an existing audio file.
Expected outcome:
The skill explains that this template is text-to-video only and recommends a model that supports audio-driven lip-sync.
Security Audit
Medium Riskv4 • 7/5/2026 Open versioned report
Most static backtick findings are Markdown examples, table values, endpoint names, or prompt samples rather than Ruby shell execution. The skill relies on local RunComfy CLI commands and a RunComfy API request with a bearer token. No prompt injection attempt or malicious exfiltration intent was found.
1
Files scanned
196
Lines analyzed
9
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Third-Party Prompt and Token Transfer
The workflow sends user prompts to the RunComfy Model API and authenticates with a bearer token. Users should understand that prompt content leaves the local environment.
Lines 178-181 describe CLI submission, a POST to the RunComfy API with the bearer token, polling, and result retrieval. This is explicit third-party data transfer, not inferred behavior.
Capability review items (9)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
Calls `runcomfy run happyhorse/happyhorse-1-0/text-to-video` through
The skill documentation intentionally directs the agent or user to run the local RunComfy CLI. External CLI execution can affect the host and submit data externally, so it requires user awareness and constrained arguments.
Medium
Ruby/shell backtick execution
```bash
The fenced example runs npx to add a skill from a GitHub source. That is real external command execution with package and supply-chain exposure.
Medium
Ruby/shell backtick execution
1. **RunComfy CLI** — `npm i -g @runcomfy/cli`
The prerequisite tells users to install the RunComfy CLI globally through npm. Global CLI installation is legitimate but has package supply-chain and host modification risk.
Medium
Ruby/shell backtick execution
2. **RunComfy account** — `runcomfy login` opens a browser device-code flow.
The prerequisite directs users to run runcomfy login, which opens an authentication flow and creates local credentials. That is expected but still a security-relevant command.
Medium
Ruby/shell backtick execution
```bash
The fenced example runs runcomfy with user-controlled prompt content and an output directory. The command is fixed, but it invokes a local CLI with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The fenced example runs runcomfy with user-controlled prompt content and an output directory. The command is fixed, but it invokes a local CLI with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The fenced example runs runcomfy with user-controlled prompt content and an output directory. The command is fixed, but it invokes a local CLI with network and filesystem effects.
Medium
Ruby/shell backtick execution
1. The skill invokes `runcomfy run happyhorse/happyhorse-1-0/text-to-video` with a JSON body matchin
The skill documentation intentionally directs the agent or user to run the local RunComfy CLI. External CLI execution can affect the host and submit data externally, so it requires user awareness and constrained arguments.
Low
Hardcoded URL
2. The CLI POSTs to `https://model-api.runcomfy.net/v1/models/happyhorse/happyhorse-1-0/text-to-vide
The documented workflow posts requests to the RunComfy Model API using a bearer token. This is intentional network behavior, but it exposes prompts and credentials to a third-party service.
Risk Factors
⚙️ External commands (40)
SKILL.md:10 SKILL.md:24-26 SKILL.md:26-44 SKILL.md:44-45 SKILL.md:45-46 SKILL.md:46 SKILL.md:50-54 SKILL.md:54-55 SKILL.md:55 SKILL.md:56 SKILL.md:57-58 SKILL.md:58-59 SKILL.md:59-65 SKILL.md:65-69 SKILL.md:69-73 SKILL.md:73-82 SKILL.md:82-86 SKILL.md:86-90 SKILL.md:90-92 SKILL.md:92 SKILL.md:98 SKILL.md:102-104 SKILL.md:104 SKILL.md:126-133 SKILL.md:133-137 SKILL.md:137-143 SKILL.md:143-147 SKILL.md:147-152 SKILL.md:152-158 SKILL.md:158-163 SKILL.md:163-169 SKILL.md:169-178 SKILL.md:178-179 SKILL.md:179-180 SKILL.md:180 SKILL.md:181 SKILL.md:182 SKILL.md:191 SKILL.md:192-194 SKILL.md:194
🌐 Network access (4)
📁 Filesystem access (5)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/doany-ai-happyhorse-1-0/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/doany-ai-happyhorse-1-0?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/doany-ai-happyhorse-1-0?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/doany-ai-happyhorse-1-0/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/doany-ai-happyhorse-1-0.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
doany-ai. (2026). happyhorse-1-0 security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/doany-ai-happyhorse-1-0/audits/4BibTeX citation
@techreport{doany-ai-doany-ai-happyhorse-1-0-2026,
author = {doany-ai},
title = {happyhorse-1-0 security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/doany-ai-happyhorse-1-0/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "happyhorse-1-0 security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "doany-ai"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/doany-ai-happyhorse-1-0/audits/4"
identifiers:
- type: other
value: "skillstore:doany-ai-happyhorse-1-0:audit:4"
description: "Skillstore immutable audit report identifier"
Compare variants
3 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Higher Skillstore usage
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
doany-ai-happyhorse-1-0
Skillstore Score 50
Evidence Confidence High
Skillstore usage 16
Updated
2026-08-21
agentspace-so-happyhorse-1-0
Skillstore Score 50
Evidence Confidence High
Skillstore usage 7
Updated
2026-08-21
runcomfy-com-happyhorse-1-0
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
67
Community
83
Spec Compliance
What You Can Build
Produce short brand videos
Create concise 1080p clips with consistent characters, clear motion, and synchronized ambience.
Prototype cinematic scenes
Test camera language, character anchors, scene beats, and audio direction before a larger production.
Automate video generation requests
Prepare valid RunComfy CLI inputs and understand expected endpoint, polling, and download behavior.
Try These Prompts
Generate a basic clip
Use HappyHorse 1.0 to create a five second 16:9 video. The scene is a cyclist crossing a quiet bridge at sunrise.
Create a vertical social ad
Create a 9:16 HappyHorse 1.0 clip for a coffee brand. Show steam, hand motion, warm cafe sound, and no dialogue.
Build a multi-shot character scene
Use HappyHorse 1.0 for two shots with the same detective in a gray coat. Keep wardrobe, lighting, and voice consistent.
Plan a model routing decision
I need a short video with native audio, stable character identity, and 1080p output. Decide if HappyHorse 1.0 is the right model.
Best Practices
- Describe motion over time instead of only describing a still image.
- Restate character anchors in each shot when requesting multi-shot consistency.
- Use a short 720p test pass before requesting a final 1080p render.
Avoid
- Do not combine many unrelated actions in one short clip.
- Do not use unsupported aspect ratios or durations above 15 seconds.
- Do not submit sensitive prompt content without reviewing third-party transfer risk.
Frequently Asked Questions
What does this skill generate?
It helps generate HappyHorse 1.0 text-to-video clips through RunComfy.
Does it require a RunComfy account?
Yes. The workflow requires the RunComfy CLI and authentication with a RunComfy account or token.
Can it create image-to-video output?
No. This template covers the text-to-video endpoint only.
What clip lengths are supported?
The documented duration range is 3 to 15 seconds.
Does prompt content stay local?
No. The workflow sends prompt requests to the RunComfy Model API.
Which tools can use this skill?
The report lists support for Claude, Codex, and Claude Code.
Developer Details
Author
doany-aiLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
c579efd02184f1128d6741d16e6c8d951d7d4208
Maintenance freshness
7/18/2026
Usage
12 downloads · 0 views
File structure
📄 SKILL.md
More from doany-ai
View all📦
runcomfy-cli
78Run RunComfy Models from the CLI
Creative teams and developers need a reliable way to run RunComfy models from automated terminal workflows. This skill explains authentication, schema discovery, job submission, polling, downloads, and safer scripting with the RunComfy CLI.
Design & Creative View
📦
elevenlabs-music-generation
78Generate ElevenLabs Music with RunComfy
Creating structured songs from text often requires a separate audio workflow and careful prompt formatting. This skill guides Claude, Codex, or Claude Code through ElevenLabs Music generation with RunComfy.
Design & Creative View
📦
ai-video-generation
78Generate AI Videos with RunComfy
Choosing the right video model is hard. This skill routes text, image, and extension requests to RunComfy models with ready prompts.
Design & Creative View
📦
ace-step
78Create Music with ACE Step
Music teams need fast drafts, language variants, and edits without manual audio tools. This skill routes requests to ACE Step on RunComfy for generation, inpainting, and outpainting.
Design & Creative View
📦
seedance-v2
77Generate Seedance 2.0 Pro Videos on RunComfy
Short video prompts often need clear schema choices and model routing. This skill guides Seedance 2.0 Pro CLI jobs with reference media, audio, and limits.
Design & Creative View
Related Skills
View all📦
wan-2-7
78Generate Wan 2.7 Videos on RunComfy
by runcomfy-com
Teams need repeatable text-to-video prompts without guessing every RunComfy option. This skill gives Claude, Codex, and Claude Code a focused Wan 2.7 workflow for prompts, audio URLs, durations, aspect ratios, and outputs.
Design & Creative View
📦
ai-avatar-video
79Create AI Avatar Videos with RunComfy
by runcomfy-com
Creating lip-synced avatar videos often requires choosing the right model and input format. This skill routes requests to RunComfy models and provides ready CLI invocations.
Design & Creative View
📦
image-to-video
78Animate Images with RunComfy Video Models
by runcomfy-com
Still images need the right model and prompt to become useful video clips. This skill routes image-to-video requests to RunComfy models with matching settings and examples.
Design & Creative View
📦
video-extend
78Extend Videos with RunComfy
by runcomfy-com
Short generated clips often need more time, cleaner endings, or connected story beats. This skill helps Claude, Codex, and Claude Code extend approved videos with RunComfy.
Design & Creative View
📦
p-video
78Generate Pruna Videos from Text and Images
by inferen-sh
Creating video model commands requires choosing compatible inputs and settings. This skill guides Pruna P-Video and WAN generation through the inference.sh CLI.
Design & Creative View
📦
seedance
80Create Seedance Video Prompts
by songguoxs
Video creators need structured Chinese prompts for Seedance workflows. This skill builds prompt plans for scenes, references, timing, sound, and extensions.
Design & Creative View