comfyui-prompt-interview
Warn
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The evaluation script
eval/run-eval.shis vulnerable to command injection. In therange_checkandeval_assertionfunctions, fields extracted from AI responses are directly interpolated into shell-executedpython3 -candnode -ecommand strings without sanitization. This allows a malicious AI response to escape the intended script logic and execute arbitrary commands on the system running the evaluation suite. - [PROMPT_INJECTION]: The evaluation framework demonstrates a vulnerability to indirect prompt injection. It ingests untrusted AI-generated content and processes it without sufficient boundary markers or validation. Combined with the script's code execution capabilities, this allows the processed data to gain control over the testing environment's execution flow.
Audit Metadata