flux-2-klein
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
runcomfyCLI to process image generation requests. Input is handled via JSON strings to prevent shell injection. - [EXTERNAL_DOWNLOADS]: Fetches the
@runcomfy/clipackage and downloads assets from vendor-owned domains. - [CREDENTIALS_UNSAFE]: Token storage is handled securely via environment variables or restricted configuration files with 0600 permissions.
- [PROMPT_INJECTION]: Processes user-provided image prompts. Risks are mitigated by JSON encapsulation and the limited capability of the image generation output to influence the host system.
Audit Metadata