·
Last changedVersion:
This version passed the hardening gate. Hardening applied 5 targeted changes and preserved all other text. Classified findings before hardening: 3. Classified findings closed: 3. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 4. Review findings remaining: 11.
1
2
None
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Closed | |
SKILL.md | Malicious Code & Command Execution | — | Low | Closed | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Closed |
3 findings
Condition image or video generation on a pose, skeleton, or motion reference. This skill routes across the pose-driven Model API endpoints reachable today and points the agent at ComfyUI workflows for richer ControlNet rigs.
runcomfy.com · Kling motion control · CLI docs
CLI deep dive: runcomfy-cli skill.
Routes split by video pose-transfer vs image pose-conditioned generation.
Kling 2-6 Motion Control Pro — kling/kling-2-6/motion-control-pro (default for video pose transfer)
Kling 2-6 Motion Control Standard — kling/kling-2-6/motion-control-standard
Wan 2-2 Animate (video-to-video) — community/wan-2-2-animate/video-to-video
Z-Image Turbo ControlNet LoRA — tongyi-mai/z-image/turbo/controlnet/lora
Model: kling/kling-2-6/motion-control-pro (or /motion-control-standard)
Catalog: motion-control-pro · kling collection
Model: tongyi-mai/z-image/turbo/controlnet/lora
Catalog: Z-Image controlnet LoRA
The routes above cover single-condition pose / motion / depth / canny. For multi-condition stacks (e.g. pose + depth + reference image), RunComfy hosts dedicated ComfyUI workflows on runcomfy.com/comfyui-workflows:
| Need | Workflow class |
|---|---|
FLUX + multi-condition ControlNet (depth + canny + pose) |
|
Pose-driven motion video with VACE |
|
Pose-control lipsync (pose + audio together) |
|
Wan 2-2 Animate v2 with pose driving |
|
OpenPose motion alignment |
|
Pose-based character animation (Scail) |
|
These are GUI workflows, not CLI endpoints. The CLI can't reach them — open them in the RunComfy ComfyUI cloud.
kling collection — motion control + identity-stable video models/feature/character-swap — Wan 2-2 Animate| code | meaning |
|---|---|
0 | success |
64 | bad CLI args |
65 | bad input JSON / schema mismatch |
69 | upstream 5xx |
75 | retryable: timeout / 429 |
77 | not signed in or token rejected |
Full reference: docs.runcomfy.com/cli/troubleshooting.
The skill classifies user intent — video motion transfer vs image pose-conditioned generation — and picks one of the routes above. The CLI POSTs to the Model API, polls request status, and downloads the result into --output-dir.
runcomfy login writes the API token to ~/.config/runcomfy/token.json with mode 0600. Set RUNCOMFY_TOKEN env var in CI / containers.--input.model-api.runcomfy.net and *.runcomfy.net / *.runcomfy.com.Bash(runcomfy *) only.runcomfy-cli — the underlying CLIai-video-generation — general t2v / i2vface-swap — Kling Motion Control overlaps when face is the focusai-avatar-video — Wan 2-2 Animate for stylized character + audioimage-edit — broader image editGet started with chainctlchainctl skill install public/agentspace-so/controlnet-pose:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/agentspace-so/controlnet-pose:latest
MIT
HARDENING.md
LICENSE
SKILL.md