🫧 Video Edit — Pro Pack on RunComfy

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:43 PM UTC
• Version:
  0.1.2

Overview

This is a disclosed RunComfy video-editing helper that routes user-provided video edit requests to RunComfy and does not show hidden or unrelated behavior.

Install only if you are comfortable sending the videos, reference images, prompts, and related URLs you choose to RunComfy. Review ambiguous requests before running the CLI because edits may consume RunComfy account credits and may process sensitive visual or audio content.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 96% confidence
• Finding: The trigger text includes a catch-all condition of 'any explicit ask to edit a video,' which is overly broad and can cause the skill to activate in situations the user did not specifically intend for this provider or workflow. Overbroad activation increases the chance of misrouting user requests and unintentionally sending user-supplied media or URLs to an external service, which is a real security and privacy concern for a skill that uploads content to a third-party API.

VirusTotal

63/63 vendors flagged this skill as clean.