๐Ÿ’ก Relight โ€” Pro Pack on RunComfy

PassAudited by ClawScan on May 14, 2026.

Overview

The skill appears purpose-aligned for relighting images through RunComfy, with the main things to notice being its RunComfy account token, external CLI install, and provider-side image processing.

This skill is reasonable to install if you intend to use RunComfy for image relighting. Before using it, make sure you trust the RunComfy CLI package, understand any account costs or quotas, and avoid submitting images or prompts that you would not want processed by an external service.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent or CLI can use the configured RunComfy account to submit jobs, which may consume credits, quota, or billing depending on the account.

Why it was flagged

The skill requires authenticating to RunComfy with a login or token, which is expected for this service but gives the CLI account-backed access.

Skill content
runcomfy login              # or in CI: export RUNCOMFY_TOKEN=<token>
Recommendation

Use a dedicated or scoped token if RunComfy supports it, keep the token out of shared logs, and revoke it when no longer needed.

What this means

Installing or running the CLI executes software from npm on the local machine.

Why it was flagged

The skill depends on an external npm-distributed CLI rather than bundled reviewed code. This is central to the stated purpose, but the package provenance and version are outside the provided artifact.

Skill content
npm i -g @runcomfy/cli      # or:  npx -y @runcomfy/cli --version
Recommendation

Install the RunComfy CLI only from the official package source, consider pinning a known version, and review the CLI documentation before first use.

What this means

Images, image URLs, and prompts selected for relighting may be sent to RunComfy and its model infrastructure.

Why it was flagged

The examples show image references and prompts being sent through the RunComfy CLI to external model endpoints for processing.

Skill content
runcomfy run qwen/qwen-edit-2509/lora/relight ... --input '{"image": "...", "prompt": "..."}'
Recommendation

Do not use sensitive or private images unless you are comfortable with RunComfy processing them under its terms and privacy policy.