Versioned security assessment

Report ID: SA-9E952417

7/24/2026, 1:35:14 AM

image-to-video security assessment v3

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: codex Latest published report
Skill name
image-to-video
Version
v3
Maintainer
skills-collective
Source
github.com/skills-collective/skills/tree/main/image-to-video/
Coverage
1 Files scanned · 206 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Highest confirmed finding severity

Medium

1 confirmed security finding requires attention.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most static alerts are false positives caused by Markdown backticks, placeholder URLs, and standard configuration paths. Eight findings confirm intended installation or execution of external CLI commands. The skill also sends prompts and user media references to a third-party model service.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Active attestation

A public attestation is available for this exact report.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 206 Lines analyzed

9 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 8 evidence locations

Filesystem access

May read or write local files.

Observed in 6 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 50 evidence locations

Capability review items (8)
Medium
SKILL.md:13
Ruby/shell backtick execution
model. Calls `runcomfy run <vendor>/<model>/image-to-video` (or
The skill explicitly states that it calls the local RunComfy CLI. This is intended external process execution with model identifiers selected by the workflow.
Medium
SKILL.md:27-29
Ruby/shell backtick execution
```bash
The fenced example invokes `npx skills add` against a community repository. Executing it downloads and installs remote skill content.
Medium
SKILL.md:48-49
Ruby/shell backtick execution
1. **RunComfy CLI** — `npm i -g @runcomfy/cli`
The prerequisite directs users to install `@runcomfy/cli` globally with npm. This executes package installation code from an external registry.
Medium
SKILL.md:49-50
Ruby/shell backtick execution
2. **RunComfy account** — `runcomfy login` opens a browser device-code flow.
The prerequisite directs users to run `runcomfy login`, which starts an external CLI and browser authentication flow.
Medium
SKILL.md:74-81
Ruby/shell backtick execution
```bash
The fenced block contains a `runcomfy run` invocation that submits an image URL and prompt to a remote model. This is intended external command execution.
Medium
SKILL.md:113-122
Ruby/shell backtick execution
```bash
The fenced block invokes the RunComfy CLI and submits a prompt plus voiceover URL to a remote model. This is intended external command execution.
Medium
SKILL.md:155-165
Ruby/shell backtick execution
```bash
The fenced block invokes the RunComfy CLI with image, video, and audio references. This is intended external execution and remote data submission.
Medium
SKILL.md:197
Ruby/shell backtick execution
The skill picks one of HappyHorse 1.0 I2V / Wan 2.7 t2v+audio / Seedance 2.0 Pro based on user inten
The line states that the workflow invokes `runcomfy run`, polls a remote request, and downloads results. This confirms intended external process and network activity.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Medium
SKILL.md:197-204
User Media Sent to a Third-Party Service
The CLI submits prompts to RunComfy, and its model server fetches user-provided image, audio, and video URLs. This creates a disclosed privacy and authorization risk.
The skill explicitly describes API submission, remote media fetching, polling, and output downloads. The third-party processing path is direct and unambiguous.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    Medium
    The workflow installs and executes a third-party CLI package.
    Pin a reviewed CLI version, publish integrity verification steps, and require user confirmation before installation or first execution.
  2. FIX-002
    Medium
    Prompts and media references are processed by RunComfy and its model infrastructure.
    Obtain explicit consent, link the applicable privacy and retention policies, and warn users against submitting sensitive or unauthorized media.
  3. FIX-003
    Medium
    User-derived prompts and URLs may become shell command arguments.
    Use structured process arguments or standard input, validate media URLs, and never interpolate user content into a shell command string.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
9e952417e76879bc9d853e1b8b2cd6d6d8d4a1c2
Content hash
7a97ff688209d3cad39a9d84b284b209c3b3cdcc775fb91b4711b2eb1555ad7b
Tree hash
9c50b2b32907fb02cb6ae3b02f8a7328ca6eaf4054b376100afa5591b5492007
Skill path
skills/skills-collective/image-to-video
Audit payload hash
3e28e4549ca36a9b5535fc6f6eafa6c5

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report Signed attestation CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: active