Back to skill

Security audit

HappyHorse 1.0 — Pro Pack on RunComfy

Security checks for vulnerabilities and agentic risk

Overview

This skill is a documented RunComfy wrapper for generating HappyHorse videos and does not show hidden or unrelated behavior.

Before installing, confirm you trust RunComfy and are comfortable sending prompts to its hosted model service, installing its CLI, and storing or providing a RunComfy API token. Choose output directories deliberately because generated videos can be large.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.