📦
ai-video-generation
74Generate AI Videos with RunComfy
Choosing a video model and formatting its inputs takes time. This skill selects a suitable RunComfy route and prepares the generation request.
Design & Creative View
Skills image-to-video
📦
image-to-video
Content revision r2 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access
Animate Still Images with the Right RunComfy Model
Choosing an image-to-video model can waste time and credits. This skill routes each request to a suitable RunComfy model and provides focused prompting guidance.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "image-to-video" from https://skillstore.io/skills/skills-collective-image-to-video.md and its manifest at https://skillstore.io/api/skills/skills-collective-image-to-video/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "image-to-video". Animate this portrait with subtle movement for a vertical profile video.
Expected outcome:
Selected HappyHorse 1.0 I2V. Planned a five-second vertical clip with blinking, breathing, stable facial features, and gentle camera drift.
Using "image-to-video". Turn this package photo into a clean rotating product reveal.
Expected outcome:
Selected HappyHorse 1.0 I2V. Planned one slow orbit with unchanged packaging, stable background geometry, and gradually intensifying rim light.
Using "image-to-video". Create a twelve-second spokesperson video synchronized to my voiceover.
Expected outcome:
Selected Wan 2.7. Planned a locked medium close-up, twelve-second duration, custom voiceover lip-sync, and controls against subtitles and flicker.
Security Audit
Medium Riskv3 • 7/24/2026 Open versioned report
Most static alerts are false positives caused by Markdown backticks, placeholder URLs, and standard configuration paths. Eight findings confirm intended installation or execution of external CLI commands. The skill also sends prompts and user media references to a third-party model service.
1
Files scanned
206
Lines analyzed
8
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
User Media Sent to a Third-Party Service
The CLI submits prompts to RunComfy, and its model server fetches user-provided image, audio, and video URLs. This creates a disclosed privacy and authorization risk.
The skill explicitly describes API submission, remote media fetching, polling, and output downloads. The third-party processing path is direct and unambiguous.
Capability review items (8)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
model. Calls `runcomfy run <vendor>/<model>/image-to-video` (or
The skill explicitly states that it calls the local RunComfy CLI. This is intended external process execution with model identifiers selected by the workflow.
Medium
Ruby/shell backtick execution
```bash
The fenced example invokes `npx skills add` against a community repository. Executing it downloads and installs remote skill content.
Medium
Ruby/shell backtick execution
1. **RunComfy CLI** — `npm i -g @runcomfy/cli`
The prerequisite directs users to install `@runcomfy/cli` globally with npm. This executes package installation code from an external registry.
Medium
Ruby/shell backtick execution
2. **RunComfy account** — `runcomfy login` opens a browser device-code flow.
The prerequisite directs users to run `runcomfy login`, which starts an external CLI and browser authentication flow.
Medium
Ruby/shell backtick execution
```bash
The fenced block contains a `runcomfy run` invocation that submits an image URL and prompt to a remote model. This is intended external command execution.
Medium
Ruby/shell backtick execution
```bash
The fenced block invokes the RunComfy CLI and submits a prompt plus voiceover URL to a remote model. This is intended external command execution.
Medium
Ruby/shell backtick execution
```bash
The fenced block invokes the RunComfy CLI with image, video, and audio references. This is intended external execution and remote data submission.
Medium
Ruby/shell backtick execution
The skill picks one of HappyHorse 1.0 I2V / Wan 2.7 t2v+audio / Seedance 2.0 Pro based on user inten
The line states that the workflow invokes `runcomfy run`, polls a remote request, and downloads results. This confirms intended external process and network activity.
Risk Factors
⚙️ External commands (50)
SKILL.md:9 SKILL.md:13 SKILL.md:27-29 SKILL.md:29-38 SKILL.md:38-39 SKILL.md:39 SKILL.md:48-49 SKILL.md:49-50 SKILL.md:50-57 SKILL.md:57-63 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65 SKILL.md:66-67 SKILL.md:67-68 SKILL.md:68-74 SKILL.md:74-81 SKILL.md:81-93 SKILL.md:93-95 SKILL.md:95 SKILL.md:103-104 SKILL.md:104-105 SKILL.md:105 SKILL.md:106 SKILL.md:107 SKILL.md:108-109 SKILL.md:109-113 SKILL.md:113-122 SKILL.md:122-127 SKILL.md:127-128 SKILL.md:128 SKILL.md:129-135 SKILL.md:135-143 SKILL.md:143-144 SKILL.md:144 SKILL.md:145 SKILL.md:146 SKILL.md:147 SKILL.md:148-149 SKILL.md:149 SKILL.md:150-151 SKILL.md:151-155 SKILL.md:155-165 SKILL.md:165-169 SKILL.md:169 SKILL.md:170-180 SKILL.md:180 SKILL.md:197 SKILL.md:201 SKILL.md:202-204
🌐 Network access (8)
📁 Filesystem access (7)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/skills-collective-image-to-video/audits/3?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/skills-collective-image-to-video?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/skills-collective-image-to-video?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skills-collective-image-to-video/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/skills-collective-image-to-video.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
skills-collective. (2026). image-to-video security audit report (audit version 3) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skills-collective-image-to-video/audits/3BibTeX citation
@techreport{skills-collective-skills-collective-image-to-video-2026,
author = {skills-collective},
title = {image-to-video security audit report (audit version 3)},
institution = {Skillstore},
year = {2026},
number = {3},
url = {https://skillstore.io/skills/skills-collective-image-to-video/audits/3},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "image-to-video security audit report (audit version 3)"
version: "unspecified"
type: report
authors:
- name: "skills-collective"
date-released: "2026-07-24"
url: "https://skillstore.io/skills/skills-collective-image-to-video/audits/3"
identifiers:
- type: other
value: "skillstore:skills-collective-image-to-video:audit:3"
description: "Skillstore immutable audit report identifier"
Compare variants
8 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
runcomfy-com Recommended
runcomfy-com-image-to-video
Skillstore Score 78
Evidence Confidence High
Skillstore usage 30
Updated
2026-08-21
genmedia-labs-image-to-video
Skillstore Score 74
Evidence Confidence Medium
Skillstore usage 2
Updated
2026-08-21
halt-catch-fire-image-to-video
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-08-21
101-skills-image-to-video
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 4
Updated
2026-08-21
skills-collective Current
skills-collective-image-to-video
Skillstore Score 50
Evidence Confidence Medium
Skillstore usage 1
Updated
2026-08-21
doany-ai-image-to-video
Skillstore Score 38
Evidence Confidence High
Skillstore usage 15
Updated
2026-08-21
agentspace-so-image-to-video
Skillstore Score 38
Evidence Confidence High
Skillstore usage 5
Updated
2026-08-21
inference-sh-9-image-to-video
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 13
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance
What You Can Build
Create Portrait Motion
Animate a portrait with controlled facial movement, stable identity, and a simple camera move for short social videos.
Build Product Reveals
Turn a product image into a short reveal with preserved packaging, smooth camera motion, and deliberate lighting changes.
Produce Localized Spokesperson Clips
Create lip-synced variants by reusing a visual direction and changing the voiceover URL for each language.
Try These Prompts
Animate a Portrait
Animate this portrait from [image URL] with subtle breathing, blinking, and gentle camera drift. Create a five-second vertical clip with stable facial features.
Create a Product Reveal
Animate [product image URL] with a slow orbit and rising rim light. Keep the packaging, logo, proportions, and background geometry unchanged.
Lip-Sync a Voiceover
Create a vertical spokesperson clip using [audio URL]. Match the duration to the voiceover, keep the camera locked, and avoid subtitles or flicker.
Combine Multimodal References
Use [image URL] for the subject, [video URL] for scene motion, and [audio URL] for voice tone. Create an eight-second coordinated clip.
Best Practices
- Lead with one clear motion or camera action and describe only what should change.
- State preservation requirements for faces, products, logos, costumes, and background geometry.
- Match duration to reference audio and reuse seeds when comparing controlled variants.
Avoid
- Do not combine several competing camera moves or character actions in one short clip.
- Do not restate every visible detail when motion, lighting, and preservation instructions are more useful.
- Do not submit sensitive, unlicensed, or inaccessible media URLs to third-party model services.
Frequently Asked Questions
Which model is selected by default?
HappyHorse 1.0 I2V is the default for general portrait, product, and still-image animation requests.
Can I use my own voiceover?
Yes. The skill routes custom voiceover lip-sync requests to Wan 2.7 using an accessible MP3 or WAV URL.
Can one request combine image, video, and audio references?
Yes. Seedance 2.0 Pro supports combined image, video, and audio references within its documented limits.
Does the skill create long videos?
No. The documented routes produce short clips with maximum durations of about fifteen seconds.
Does it require a local installation?
Yes. The workflow requires the RunComfy CLI, account authentication, and network access to RunComfy services.
Where are generated files saved?
The RunComfy CLI downloads generated outputs into the output directory selected for the request.
Developer Details
Author
skills-collectiveLicense
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
9e952417e76879bc9d853e1b8b2cd6d6d8d4a1c2
Maintenance freshness
7/24/2026
Usage
0 downloads · 0 views
File structure
📄 SKILL.md
More from skills-collective
View all📦
ai-music
50Create and Edit AI Music with RunComfy
Choosing a music model and valid parameters can slow production. This skill routes each request and prepares a RunComfy command for generation or audio editing.
Design & Creative View
📦
ai-image-generation
38Generate Images with the Right RunComfy Model
Choosing an image model and its parameters is difficult. This skill routes each request to a suitable RunComfy model and prepares the generation command.
Design & Creative View
📦
video-edit
38Edit Videos with Intent-Routed AI Models
Choosing the wrong video model wastes time and produces inconsistent edits. This skill selects a suitable RunComfy model and builds model-specific instructions.
Design & Creative View
Related Skills
View all📦
ai-avatar-video
79Create AI Avatar Videos with RunComfy
by runcomfy-com
Creating lip-synced avatar videos often requires choosing the right model and input format. This skill routes requests to RunComfy models and provides ready CLI invocations.
Design & Creative View
📦
wan-2-7
78Generate Wan 2.7 Videos on RunComfy
by runcomfy-com
Teams need repeatable text-to-video prompts without guessing every RunComfy option. This skill gives Claude, Codex, and Claude Code a focused Wan 2.7 workflow for prompts, audio URLs, durations, aspect ratios, and outputs.
Design & Creative View
📦
runcomfy-cli
78Run RunComfy Models from the CLI
by runcomfy-com
Teams need a repeatable way to run RunComfy media models from scripts. This skill guides CLI install, authentication, model runs, polling, and downloads.
Design & Creative View
📦
video-extend
78Extend Videos with RunComfy
by runcomfy-com
Short generated clips often need more time, cleaner endings, or connected story beats. This skill helps Claude, Codex, and Claude Code extend approved videos with RunComfy.
Design & Creative View
📦
controlnet-pose
79Create Pose-Controlled Images and Videos
by runcomfy-com
Pose-controlled generation often requires choosing the right model and input format. This skill routes image and video requests to RunComfy workflows.
Design & Creative View
📦
ace-step
79Generate ACE Step Music on RunComfy
by runcomfy-com
Creating affordable AI music often needs endpoint selection, structured lyrics, and repeatable CLI inputs. This skill guides ACE Step generation, inpainting, and outpainting through RunComfy.
Design & Creative View