OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides standard interaction with a local ComfyUI server via its REST API. It includes commands for queuing workflows and downloading generated images. A minor security surface for indirect prompt injection exists due to the ingestion of local inventory and reference files used for validation.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed