lipsync
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a scoped execution environment restricted to the
runcomfycommand viaBash(runcomfy *), preventing arbitrary shell access. - [EXTERNAL_DOWNLOADS]: Recommends the installation of the
@runcomfy/clipackage from the official npm registry, which is the standard distribution channel for the vendor's tooling. - [DATA_EXFILTRATION]: Describes secure storage of API tokens in
~/.config/runcomfy/token.jsonwith appropriate file permissions (mode 0600) and supports environment variable usage for CI environments. - [SAFE]: The skill explicitly includes a 'Security & Privacy' section that warns against dangerous practices like piping remote scripts into shells and addresses the dual-use nature of synthetic media.
Audit Metadata