OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit May 19, 2026
Independent checks from skills.sh's audit partners.
This skill enables AI image generation and editing through the RunComfy CLI. It adheres to security best practices by using structured JSON inputs to prevent shell injection and provides explicit guidance on secure API token handling. A potential surface for indirect prompt injection exists when the skill processes external image URLs or web search results, a risk that is clearly documented in the skill's security policy.
Detected behaviors
No alerts
2 issues