·
Last changedVersion:
This version passed the hardening gate. Hardening applied 10 targeted changes and preserved all other text. Classified findings before hardening: 4. Classified findings closed: 3. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 5. Review findings remaining: 11.
2
2
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Closed | |
SKILL.md | Excessive Agency & Rogue Autonomy | — | Medium | Open | |
SKILL.md | Malicious Code & Command Execution | — | Low | Closed | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Closed |
4 findings
Drive a face's mouth from an audio track. This skill routes across the lip-sync endpoints in the RunComfy catalog — OmniHuman, Sync Labs sync v2, Kling lipsync, Creatify — picking the right model for the user's actual intent and shipping the documented prompts + the exact runcomfy run invoke.
runcomfy.com · Sync Labs models · CLI docs
CLI deep dive: runcomfy-cli skill.
Driving a real person's mouth from a separate audio track is dual-use. Refuse user requests that target real public figures without consent, or that aim at defamatory or sexually explicit synthetic media.
Listed newest first within each subtype. The agent picks one route based on: input shape (portrait still + audio vs source video + audio vs script-only), quality tier, and budget.
Sync Labs sync v2 Pro — sync/sync/lipsync/v2/pro
Sync Labs sync v2 — sync/sync/lipsync/v2
Kling Lipsync (audio-to-video) — kling/lipsync/audio-to-video
Creatify Lipsync — creatify/lipsync
OmniHuman — bytedance/omnihuman/api (default for avatar-style)
Wan 2-7 with audio_url — wan-ai/wan-2-7/text-to-video
Kling Lipsync (text-to-video) — kling/lipsync/text-to-video
HappyHorse 1.0 — happyhorse/happyhorse-1-0/text-to-video (also /image-to-video)
Model: sync/sync/lipsync/v2/pro (or sync/sync/lipsync/v2)
Catalog: sync v2 Pro · sync v2
Model: bytedance/omnihuman/api
Catalog: omnihuman
ai-avatar-video skill for the full avatar treatment.Model: kling/lipsync/audio-to-video (existing video + audio) or kling/lipsync/text-to-video (script-only)
Catalog: Kling lipsync a2v · Kling lipsync t2v
Schema details on the model page.
community/wan-2-2-animate/video-to-video) — see ai-avatar-video.kling collection — including Kling lipsync variants| code | meaning |
|---|---|
0 | success |
64 | bad CLI args |
65 | bad input JSON / schema mismatch |
69 | upstream 5xx |
75 | retryable: timeout / 429 |
77 | not signed in or token rejected |
Full reference: docs.runcomfy.com/cli/troubleshooting.
The skill classifies user intent — source video + audio? portrait still + audio? script only? — picks the matching route, and invokes runcomfy run with the JSON body. The CLI POSTs to the Model API, polls request status, fetches the result, and downloads any .runcomfy.net / .runcomfy.com URLs into --output-dir.
Consent: see the "Consent" section above. Lipsync is dual-use; refuse user requests targeting real people without consent.
Install via verified package manager only. Agents must not pipe an arbitrary remote install script into a shell on the user's behalf.
Token storage: runcomfy login writes the API token to ~/.config/runcomfy/token.json with mode 0600. Set RUNCOMFY_TOKEN env var in CI / containers.
Input boundary (shell injection): prompts and asset URLs are passed as a JSON string via --input.
Indirect prompt injection (third-party content): source video and audio URLs are untrusted; embedded instructions in either can influence generation. Agent mitigations:
Voice provenance: confirm the speaker in the audio has consented to having their voice paired with the target face. Both rights must be in hand.
Scope of bash usage: Bash(runcomfy *) only.
runcomfy-cli — the underlying CLIai-avatar-video — full avatar / talking-head router (OmniHuman + HappyHorse + Wan)ai-video-generation — general t2v / i2vface-swap — identity swap on existing videovideo-edit — broader video editGet started with chainctlchainctl skill install public/agentspace-so/lipsync:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/agentspace-so/lipsync:latest
MIT
HARDENING.md
LICENSE
SKILL.md