📦
ai-video-generation
74Generate AI Videos with RunComfy
Choosing a video model and formatting its inputs takes time. This skill selects a suitable RunComfy route and prepares the generation request.
Design & Creative View
Skills ai-image-generation
📦
ai-image-generation
Content revision r1 High Risk ⚙️ External commands🌐 Network access📁 Filesystem access
Generate Images with the Right RunComfy Model
Choosing an image model and its parameters is difficult. This skill routes each request to a suitable RunComfy model and prepares the generation command.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "ai-image-generation" from https://skillstore.io/skills/skills-collective-ai-image-generation.md and its manifest at https://skillstore.io/api/skills/skills-collective-ai-image-generation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "ai-image-generation". Create a wide photoreal product image of a ceramic mug in warm morning light.
Expected outcome:
- Selected FLUX 2 Klein 9B for a polished general-purpose image.
- Prepared a wide final-quality generation with explicit subject and lighting details.
- Saved returned images in the selected output folder.
Using "ai-image-generation". Design a launch poster whose headline reads exactly "AURORA Spring 2026".
Expected outcome:
- Selected GPT Image 2 for precise headline rendering and layout control.
- Prepared a landscape poster request with the headline quoted exactly.
Using "ai-image-generation". Keep the person unchanged and replace the background with a rainy city street.
Expected outcome:
- Selected Nano Banana 2 Edit for identity-preserving image editing.
- Placed preservation requirements before the requested background change.
Security Audit
High Riskv1 • 7/14/2026 Open versioned report
Most alerts are false positives from Markdown syntax, documentation links, URL placeholders, and model comparison text. The skill intentionally runs external packages and RunComfy commands. User-derived shell arguments need robust escaping, and prompts or references leave the local environment.
1
Files scanned
497
Lines analyzed
15
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Unsafe shell construction for user-derived prompts
The skill claims prompt content has no shell-injection surface, but examples place JSON inside shell quotes. An unescaped apostrophe can terminate quoting before RunComfy receives the argument.
The examples use a shell command with single-quoted JSON, while line 481 explicitly claims quotes cannot create injection. Shell parsing occurs before the CLI receives its argument.
Medium
User content is processed by a third-party service
RunComfy receives prompt bodies and reference URLs, polls remote jobs, and returns generated files. Sensitive prompts or signed reference URLs therefore leave the local environment.
The source explicitly states that the CLI posts request bodies and that RunComfy servers fetch references and web results.
Capability review items (15)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
```bash
The enclosed setup block directs users to install or execute an npm package, authenticate, and invoke RunComfy. These are intentional external commands with package, network, and credential exposure.
Medium
Ruby/shell backtick execution
```bash
The enclosed command uses npx to fetch and execute a skill installer with global scope. This is intentional external command execution and carries normal package supply-chain risk.
Medium
Ruby/shell backtick execution
```bash
The enclosed example executes the RunComfy CLI, sends a prompt to a remote model, and writes downloaded output. This is an intended external command with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The enclosed example executes the RunComfy CLI, sends a prompt to a remote model, and writes downloaded output. This is an intended external command with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The enclosed example executes the RunComfy CLI, sends a prompt to a remote model, and writes downloaded output. This is an intended external command with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The enclosed example executes the RunComfy CLI, sends a prompt to a remote model, and writes downloaded output. This is an intended external command with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The enclosed example executes the RunComfy CLI, sends a prompt to a remote model, and writes downloaded output. This is an intended external command with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The enclosed example executes the RunComfy CLI, sends a prompt to a remote model, and writes downloaded output. This is an intended external command with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The enclosed example executes the RunComfy CLI, sends a prompt to a remote model, and writes downloaded output. This is an intended external command with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The enclosed edit example executes RunComfy with a remote image reference and writes output locally. This is intentional external command execution with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The enclosed edit example executes RunComfy with a remote image reference and writes output locally. This is intentional external command execution with network and filesystem effects.
Medium
Ruby/shell backtick execution
```bash
The enclosed edit example executes RunComfy with a remote image reference and writes output locally. This is intentional external command execution with network and filesystem effects.
Medium
Ruby/shell backtick execution
The skill classifies the user request into one of the t2i or i2i routes above and invokes `runcomfy
This line states that the skill invokes RunComfy, posts request data, polls a remote service, and downloads results. External command execution is an intended operational capability.
Medium
Ruby/shell backtick execution
- **Install via verified package manager only.** This skill instructs the operator to install the CL
This line instructs the operator to install or execute the RunComfy npm package. The package-manager source is identified, but executing third-party packages remains a real supply-chain risk.
Medium
Ruby/shell backtick execution
- **Scope of bash usage**: declared `allowed-tools: Bash(runcomfy *)`. The skill never instructs the
The declared Bash scope authorizes all RunComfy subcommands, confirming intentional external command execution. The scope is limited to one CLI, but that CLI can use network and filesystem resources.
Risk Factors
⚙️ External commands (50)
SKILL.md:6 SKILL.md:15 SKILL.md:25 SKILL.md:31-45 SKILL.md:45-51 SKILL.md:51-53 SKILL.md:53-61 SKILL.md:61-66 SKILL.md:66-71 SKILL.md:71 SKILL.md:76-81 SKILL.md:81-82 SKILL.md:82-86 SKILL.md:86-91 SKILL.md:91-96 SKILL.md:96-101 SKILL.md:101-106 SKILL.md:106-107 SKILL.md:107-111 SKILL.md:111 SKILL.md:116-117 SKILL.md:117-123 SKILL.md:123-128 SKILL.md:128-131 SKILL.md:131-133 SKILL.md:133-136 SKILL.md:136-138 SKILL.md:138-143 SKILL.md:143-148 SKILL.md:148-153 SKILL.md:153-158 SKILL.md:158-163 SKILL.md:163-168 SKILL.md:168-174 SKILL.md:174 SKILL.md:181-182 SKILL.md:182-183 SKILL.md:183-184 SKILL.md:184-192 SKILL.md:192-201 SKILL.md:201-205 SKILL.md:205-209 SKILL.md:209-216 SKILL.md:216-222 SKILL.md:222-229 SKILL.md:229 SKILL.md:230 SKILL.md:236-243 SKILL.md:243-247 SKILL.md:247-254
🌐 Network access (50)
SKILL.md:19 SKILL.md:25 SKILL.md:27 SKILL.md:47 SKILL.md:71 SKILL.md:76 SKILL.md:91 SKILL.md:96 SKILL.md:101 SKILL.md:106 SKILL.md:111 SKILL.md:116 SKILL.md:123 SKILL.md:131 SKILL.md:136 SKILL.md:138 SKILL.md:143 SKILL.md:148 SKILL.md:153 SKILL.md:158 SKILL.md:168 SKILL.md:175 SKILL.md:186 SKILL.md:223 SKILL.md:268 SKILL.md:316 SKILL.md:317 SKILL.md:344 SKILL.md:345 SKILL.md:346 SKILL.md:347 SKILL.md:348 SKILL.md:356 SKILL.md:364 SKILL.md:377 SKILL.md:391 SKILL.md:411 SKILL.md:445 SKILL.md:446 SKILL.md:447 SKILL.md:448 SKILL.md:449 SKILL.md:450 SKILL.md:451 SKILL.md:452 SKILL.md:469 SKILL.md:492 SKILL.md:493 SKILL.md:494 SKILL.md:495
📁 Filesystem access (5)
Audited by: claude
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/skills-collective-ai-image-generation/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/skills-collective-ai-image-generation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/skills-collective-ai-image-generation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skills-collective-ai-image-generation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/skills-collective-ai-image-generation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
skills-collective. (2026). ai-image-generation security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skills-collective-ai-image-generation/audits/1BibTeX citation
@techreport{skills-collective-skills-collective-ai-image-generation-2026,
author = {skills-collective},
title = {ai-image-generation security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/skills-collective-ai-image-generation/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-image-generation security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "skills-collective"
date-released: "2026-07-14"
url: "https://skillstore.io/skills/skills-collective-ai-image-generation/audits/1"
identifiers:
- type: other
value: "skillstore:skills-collective-ai-image-generation:audit:1"
description: "Skillstore immutable audit report identifier"
Compare variants
23 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Higher Skillstore usage
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
tool-belt Recommended
tool-belt-ai-image-generation
Skillstore Score 78
Evidence Confidence High
Skillstore usage 25
Updated
2026-08-21
runcomfy-com-ai-image-generation
Skillstore Score 78
Evidence Confidence High
Skillstore usage 22
Updated
2026-08-21
inference-shell-ai-image-generation
Skillstore Score 78
Evidence Confidence High
Skillstore usage 11
Updated
2026-08-21
tul-sh-ai-image-generation
Skillstore Score 75
Evidence Confidence High
Skillstore usage 19
Updated
2026-08-21
inferen-sh-ai-image-generation
Skillstore Score 69
Evidence Confidence High
Skillstore usage 15
Updated
2026-08-21
infsh-skills-ai-image-generation
Skillstore Score 69
Evidence Confidence High
Skillstore usage 11
Updated
2026-08-21
inference-skills-ai-image-generation
Skillstore Score 69
Evidence Confidence High
Skillstore usage 10
Updated
2026-08-21
inference-sh-skills-ai-image-generation
Skillstore Score 69
Evidence Confidence High
Skillstore usage 8
Updated
2026-08-21
skillssh-ai-image-generation
Skillstore Score 69
Evidence Confidence High
Skillstore usage 7
Updated
2026-08-21
doany-ai-ai-image-generation
Skillstore Score 69
Evidence Confidence High
Skillstore usage 6
Updated
2026-08-21
qu-skills-ai-image-generation
Skillstore Score 69
Evidence Confidence Medium
Skillstore usage 12
Updated
2026-08-21
genmedia-labs-ai-image-generation
Skillstore Score 69
Evidence Confidence Medium
Skillstore usage 2
Updated
2026-08-21
toolshell-ai-image-generation
Skillstore Score 50
Evidence Confidence High
Skillstore usage 15
Updated
2026-08-21
skills-shell-ai-image-generation
Skillstore Score 50
Evidence Confidence High
Skillstore usage 7
Updated
2026-08-21
101-skills-ai-image-generation
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 6
Updated
2026-08-21
prime-skills-ai-image-generation
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 2
Updated
2026-08-21
agentspace-so-ai-image-generation
Skillstore Score 38
Evidence Confidence High
Skillstore usage 13
Updated
2026-08-21
halt-catch-fire-ai-image-generation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 50
Updated
2026-08-21
inference-sh-ai-image-generation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 32
Updated
2026-08-21
inference-sh-9-ai-image-generation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 19
Updated
2026-08-21
inference-sh-8-ai-image-generation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated
2026-08-21
skills-collective Current
skills-collective-ai-image-generation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 5
Updated
2026-08-21
danielgwilson-ai-image-generation
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 4
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance
What You Can Build
Create campaign artwork
Select a model for exact headlines, brand layouts, or polished product visuals and prepare the matching request.
Produce rapid concepts
Generate low-resolution variants for storyboards, moodboards, and early creative review before requesting final output.
Automate image workflows
Choose reproducible model parameters and output settings for scripts, content pipelines, or repeated asset generation.
Try These Prompts
Generate a simple image
Create an image of [subject] in [setting]. Use a [style] look, [lighting], and a [aspect ratio] composition.
Create a poster with text
Create a [format] poster for [product]. The headline must read exactly "[headline]" in [font style]. Use [colors] and [layout].
Edit a reference image
Edit [reference URL]. Preserve [identity, pose, or layout]. Change only [target element] to [new appearance]. Keep all other details unchanged.
Plan a multi-stage campaign
Create [count] draft concepts for [campaign]. Compare suitable models, generate economical drafts, select one direction, then prepare a final high-resolution version.
Best Practices
- State the subject first, then describe the scene, lighting, style, and output constraints.
- Use economical draft settings for exploration, then increase resolution or quality only for selected finals.
- Provide only approved reference URLs and confirm before enabling web grounding or sending sensitive content.
Avoid
- Do not request exact typography from a model that is weak at rendering text.
- Do not expose secrets, private signed URLs, or confidential prompts to remote model services.
- Do not interpolate unescaped user text directly into shell-quoted command arguments.
Frequently Asked Questions
Does this skill generate images locally?
No. It sends requests to RunComfy model endpoints and downloads the generated results.
Which model does the skill choose by default?
It prefers FLUX 2 Klein 9B for general text-to-image work and Nano Banana 2 Edit for general editing.
Can it create posters with exact text?
Yes. It routes typography-focused requests to GPT Image 2 and quotes required text in the prompt.
Can it preserve a person during an edit?
It can request identity-preserving edits, but consistency depends on the model, reference quality, and requested change.
What credentials are required?
A RunComfy login or RUNCOMFY_TOKEN is required. The CLI stores interactive credentials in a protected user configuration file.
Can model costs and availability change?
Yes. Check current RunComfy model pages before large batches or production use.
Developer Details
Author
skills-collectiveLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
1a7113106876f4a10455028598215006e9a2d31b
Maintenance freshness
7/18/2026
Usage
0 downloads · 0 views
File structure
📄 SKILL.md
More from skills-collective
View all📦
ai-music
50Create and Edit AI Music with RunComfy
Choosing a music model and valid parameters can slow production. This skill routes each request and prepares a RunComfy command for generation or audio editing.
Design & Creative View
📦
image-to-video
50Animate Still Images with the Right RunComfy Model
Choosing an image-to-video model can waste time and credits. This skill routes each request to a suitable RunComfy model and provides focused prompting guidance.
Design & Creative View
📦
video-edit
38Edit Videos with Intent-Routed AI Models
Choosing the wrong video model wastes time and produces inconsistent edits. This skill selects a suitable RunComfy model and builds model-specific instructions.
Design & Creative View
Related Skills
View all📦
imagegen
82Create and Edit Project Images
by openai
Producing consistent raster assets requires precise prompts, careful edits, and reliable output handling. This skill structures requests, creates or edits visuals, validates results, and saves project-ready files.
Design & Creative View
📦
controlnet-pose
79Create Pose-Controlled Images and Videos
by doany-ai
Pose and motion control workflows can be hard to route across image and video models. This skill selects the right RunComfy path and prepares clear CLI guidance.
Design & Creative View
📦
image-outpainting
79Extend Images Beyond the Frame
by agentspace-so
Cropped images often need a wider canvas for banners, social posts, or product layouts. This skill guides Claude, Codex, and Claude Code to outpaint images with RunComfy models while preserving the original subject.
Design & Creative View
📦
generating-storyboards
82Create Consistent Video Storyboards
by supercmohq
Video concepts can lose continuity when clips are planned separately. This skill creates sequential storyboard sheets that preserve characters, products, settings, and visual states.
Design & Creative View
📦
generating-ai-actors
82Create Reusable Photorealistic AI Actors
by supercmohq
Campaign teams need consistent fictional talent without supplying a person photograph. This skill creates one detailed adult identity that can guide later image and video generation.
Design & Creative View
📦
qwen-image-2-pro
79Generate Text-Rich Images with Qwen Pro
by inference-shell
Design teams need image prompts that preserve text and layout details. This skill guides Claude, Codex, or Claude Code to call Qwen-Image-2-Pro through inference.sh.
Design & Creative View