kling-3-0
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate integration for the Kling 3.0 video model and does not contain malicious patterns.
- [EXTERNAL_DOWNLOADS]: The skill requires the
@runcomfy/cliNode.js package. This is an official resource from the vendor and is used for its intended purpose of interfacing with the RunComfy API. - [COMMAND_EXECUTION]: The skill invokes the vendor's CLI to perform generations. User-supplied parameters like prompts and URLs are passed within a structured JSON object in the command line, which mitigates shell injection risks as noted in the skill's security documentation.
- [CREDENTIALS_UNSAFE]: Credential management is handled through secure practices, utilizing environment variables or configuration files with restricted permissions (0600), rather than hardcoded secrets.
Audit Metadata