📦
controlnet-pose
79Create Pose-Controlled Images and Videos
Pose-controlled generation often requires choosing the right model and input format. This skill routes image and video requests to RunComfy workflows.
Design & Creative View
Skills image-to-video
📦
image-to-video
Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access
Animate Images with RunComfy Video Models
Still images need the right model and prompt to become useful video clips. This skill routes image-to-video requests to RunComfy models with matching settings and examples.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "image-to-video" from https://skillstore.io/skills/runcomfy-com-image-to-video.md and its manifest at https://skillstore.io/api/skills/runcomfy-com-image-to-video/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "image-to-video". A user provides a product photo and asks for a short vertical launch teaser.
Expected outcome:
The skill selects HappyHorse 1.0 I2V, recommends a portrait aspect workflow, and drafts a motion-focused product reveal prompt.
Using "image-to-video". A user has a portrait image and a 10 second voiceover for a spokesperson clip.
Expected outcome:
The skill selects Wan 2.7 with audio input, aligns duration to the voiceover, and suggests a stable talking-head prompt.
Using "image-to-video". A user wants a subject photo animated with a reference cafe video and a voice reference.
Expected outcome:
The skill selects Seedance 2.0 Pro and explains how to map each reference to subject, scene, and voice behavior.
Security Audit
Safev6 • 7/9/2026 Open versioned report
Most static findings are Markdown formatting, placeholder URLs, or documented token-storage text rather than malicious behavior. The skill does intentionally ask users to install and run the RunComfy CLI, so external command use is confirmed and should require explicit user consent.
1
Files scanned
206
Lines analyzed
9
Review items
0
False positives ignored
Capability review items (9)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
model. Calls `runcomfy run <vendor>/<model>/image-to-video` (or
The line states the skill calls runcomfy run through the local CLI. This is intentional external command execution and needs user confirmation.
Medium
Ruby/shell backtick execution
```bash
This Markdown shell block contains an npx command to add the skill globally. It is a real install command with supply-chain and environment-change risk.
Medium
Ruby/shell backtick execution
1. **RunComfy CLI** — `npm i -g @runcomfy/cli`
This line tells users to install @runcomfy/cli globally with npm. Global package installation is legitimate but still an external command risk.
Medium
Ruby/shell backtick execution
2. **RunComfy account** — `runcomfy login` opens a browser device-code flow.
This line tells users to run runcomfy login. The command starts an authentication flow and should only run with explicit user approval.
Medium
Ruby/shell backtick execution
```bash
This shell block demonstrates runcomfy run for the HappyHorse model. It executes a local CLI that submits user inputs to an external service.
Medium
Ruby/shell backtick execution
```bash
This shell block demonstrates runcomfy run for the Wan model. It executes a local CLI using user-provided prompt and audio inputs.
Medium
Ruby/shell backtick execution
```bash
This shell block demonstrates runcomfy run for Seedance. It executes a local CLI with image, video, and audio references.
Medium
Ruby/shell backtick execution
The skill picks one of HappyHorse 1.0 I2V / Wan 2.7 t2v+audio / Seedance 2.0 Pro based on user inten
The prose says the skill invokes runcomfy run and the CLI posts requests, polls, and downloads output. That confirms intended external command execution.
Medium
Ruby/shell backtick execution
- **Token storage**: `runcomfy login` writes the API token to `~/.config/runcomfy/token.json` with m
This line documents runcomfy login and local token storage. The login command is legitimate but security-sensitive because it manages credentials.
Risk Factors
⚙️ External commands (50)
SKILL.md:9 SKILL.md:13 SKILL.md:27-29 SKILL.md:29-38 SKILL.md:38-39 SKILL.md:39 SKILL.md:48-49 SKILL.md:49-50 SKILL.md:50-57 SKILL.md:57-63 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65 SKILL.md:66-67 SKILL.md:67-68 SKILL.md:68-74 SKILL.md:74-81 SKILL.md:81-93 SKILL.md:93-95 SKILL.md:95 SKILL.md:103-104 SKILL.md:104-105 SKILL.md:105 SKILL.md:106 SKILL.md:107 SKILL.md:108-109 SKILL.md:109-113 SKILL.md:113-122 SKILL.md:122-127 SKILL.md:127-128 SKILL.md:128 SKILL.md:129-135 SKILL.md:135-143 SKILL.md:143-144 SKILL.md:144 SKILL.md:145 SKILL.md:146 SKILL.md:147 SKILL.md:148-149 SKILL.md:149 SKILL.md:150-151 SKILL.md:151-155 SKILL.md:155-165 SKILL.md:165-169 SKILL.md:169 SKILL.md:170-180 SKILL.md:180 SKILL.md:197 SKILL.md:201 SKILL.md:202-204
🌐 Network access (8)
📁 Filesystem access (7)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/runcomfy-com-image-to-video/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/runcomfy-com-image-to-video?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/runcomfy-com-image-to-video?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/runcomfy-com-image-to-video/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/runcomfy-com-image-to-video.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
runcomfy-com. (2026). image-to-video security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/runcomfy-com-image-to-video/audits/6BibTeX citation
@techreport{runcomfy-com-runcomfy-com-image-to-video-2026,
author = {runcomfy-com},
title = {image-to-video security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/runcomfy-com-image-to-video/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "image-to-video security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "runcomfy-com"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/runcomfy-com-image-to-video/audits/6"
identifiers:
- type: other
value: "skillstore:runcomfy-com-image-to-video:audit:6"
description: "Skillstore immutable audit report identifier"
Compare variants
8 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
runcomfy-com-image-to-video
Skillstore Score 78
Evidence Confidence High
Skillstore usage 30
Updated
2026-08-21
genmedia-labs-image-to-video
Skillstore Score 74
Evidence Confidence Medium
Skillstore usage 2
Updated
2026-08-21
halt-catch-fire-image-to-video
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-08-21
101-skills-image-to-video
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 4
Updated
2026-08-21
skills-collective-image-to-video
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 1
Updated
2026-08-21
doany-ai-image-to-video
Skillstore Score 38
Evidence Confidence High
Skillstore usage 15
Updated
2026-08-21
agentspace-so-image-to-video
Skillstore Score 38
Evidence Confidence High
Skillstore usage 5
Updated
2026-08-21
inference-sh-9-image-to-video
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 13
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
71
Community
83
Spec Compliance
What You Can Build
Create Product Motion Clips
Turn product photos into short reveal videos with camera movement and stable packaging details.
Animate Portraits for Social Posts
Convert a portrait image into a brief clip with facial stability, subtle motion, and optional ambient audio.
Produce Localized Talking Clips
Use the same visual concept with different voiceover tracks for multilingual lip-sync variants.
Try These Prompts
Animate a Single Image
Animate this image into a 5 second video. Keep the subject stable and add a gentle camera push-in.
Create a Product Reveal
Turn this product photo into a 6 second reveal video. Orbit slowly, keep labels readable, and preserve packaging geometry.
Generate a Lip-Sync Clip
Create a 12 second talking-head video from this portrait and voiceover. Match the duration, use warm studio light, and avoid subtitles.
Build a Multimodal Reference Video
Use image 1 for the subject, video 1 for scene movement, and audio 1 for voice tone. Produce an 8 second cinematic clip.
Best Practices
- State the primary motion first, then describe camera movement, lighting changes, and preservation goals.
- Match duration to the source audio when generating lip-sync or voice-led clips.
- Confirm users have rights to submit any image, video, or audio URL to RunComfy.
Avoid
- Do not use one prompt to request several unrelated motions in a short clip.
- Do not submit private media URLs without user consent and access review.
- Do not assume one model supports every route, reference type, or output resolution.
Frequently Asked Questions
Does this skill generate videos locally?
No. It uses the local RunComfy CLI to submit requests to RunComfy model services.
Which model is used by default?
HappyHorse 1.0 I2V is the default for general portrait, product, and image animation requests.
Can it use a custom voiceover?
Yes. It routes custom voiceover lip-sync requests to Wan 2.7 with an audio URL.
Can it use reference video and audio together?
Yes. It routes image, video, and audio reference workflows to Seedance 2.0 Pro.
What authentication is required?
Users need the RunComfy CLI and either a RunComfy login session or a RUNCOMFY_TOKEN value.
What should users check before running it?
Users should verify media rights, media size limits, model duration limits, and consent for third-party processing.
Developer Details
Author
runcomfy-comLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
0519034dad657fb1f7706e0550e962beeda73fdf
Maintenance freshness
7/18/2026
Usage
25 downloads · 2 views
File structure
📄 SKILL.md
More from runcomfy-com
View all📦
ace-step
79Generate ACE Step Music on RunComfy
Creating affordable AI music often needs endpoint selection, structured lyrics, and repeatable CLI inputs. This skill guides ACE Step generation, inpainting, and outpainting through RunComfy.
Design & Creative View
📦
elevenlabs-music-generation
79Generate Music with ElevenLabs on RunComfy
Creating production-ready music prompts and CLI calls can be slow and error-prone. This skill guides Claude, Codex, and Claude Code through ElevenLabs Music generation on RunComfy with clear parameters and workflow advice.
Design & Creative View
📦
ai-avatar-video
79Create AI Avatar Videos with RunComfy
Creating lip-synced avatar videos often requires choosing the right model and input format. This skill routes requests to RunComfy models and provides ready CLI invocations.
Design & Creative View
📦
image-inpainting
79Inpaint Images with RunComfy
Mask-driven image edits can be slow when prompts, masks, and model choices are handled manually. This skill guides Claude, Codex, or Claude Code to run RunComfy inpainting with the right model and inputs.
Design & Creative View
📦
ai-video-generation
78Generate AI Videos with RunComfy
Choosing the right video model and prompt format can slow production work. This skill selects a RunComfy route and prepares clear CLI-ready generation guidance.
Design & Creative View
Related Skills
View all📦
seedance
80Create Seedance Video Prompts
by songguoxs
Video creators need structured Chinese prompts for Seedance workflows. This skill builds prompt plans for scenes, references, timing, sound, and extensions.
Design & Creative View
📦
video-generation-skill
79Create AI Video Plans for Marketing
by CleanExpo
Marketing teams need clear video plans before using generation tools. This skill turns campaign ideas into scripts, shot lists, platform notes, and edit guidance.
Design & Creative View
📦
image-outpainting
79Extend Images Beyond the Frame
by agentspace-so
Cropped images often need a wider canvas for banners, social posts, or product layouts. This skill guides Claude, Codex, and Claude Code to outpaint images with RunComfy models while preserving the original subject.
Design & Creative View
📦
animate
78Add Purposeful UI Animation
by pbakaus
Static interfaces can feel abrupt and unclear during state changes. This skill guides Claude, Codex, and Claude Code to add accessible, performant motion where it improves usability.
Design & Creative View
📦
overdrive
78Build High-Impact Frontend Effects
by pbakaus
Advanced interface effects can misfire without design context and performance checks. Overdrive guides agents to propose, build, and verify polished frontend enhancements.
Design & Creative View
📦
runcomfy-cli
78Run RunComfy Models from the CLI
by doany-ai
Creative teams and developers need a reliable way to run RunComfy models from automated terminal workflows. This skill explains authentication, schema discovery, job submission, polling, downloads, and safer scripting with the RunComfy CLI.
Design & Creative View