·
Last changedVersion:
This version passed the hardening gate. Hardening applied 10 targeted changes and preserved all other text. Classified findings before hardening: 1. Classified findings closed: 1. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 12. Review findings remaining: 0.
1
None
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Closed |
1 finding
runcomfy.com · Wan 2.7 Edit-Video · Kling Motion-Control Pro · Lucy Edit Restyle
Video edit, intent-routed. This skill doesn't lock you to one model — it picks the right video-edit model in the RunComfy catalog based on what the user actually wants: general restyle, motion transfer from a reference clip, or lightweight identity-stable outfit / background swap.
| User intent | Model | Why |
|---|---|---|
Restyle a talking-head video — preserve face / pose / lip movement | Wan 2.7 Edit-Video | Strong identity + motion preservation; supports up to 1080p |
Swap product background, keep camera motion | Wan 2.7 Edit-Video | Camera motion preserved; one-direction edit honored |
Replace packaging design using a reference image | Wan 2.7 Edit-Video + | Reference-conditioned design transfer |
Apply cinematic color grade / commercial polish | Wan 2.7 Edit-Video | Good at single-direction global look changes |
Transfer precise motion from a reference video to a target character | Kling 2.6 Pro Motion Control | Designed for motion mapping with identity hold |
Lip-sync motion of a target character to source video's lip movement | Kling 2.6 Pro Motion Control | Built for tight temporal coherence |
Lightweight outfit / costume swap with identity preservation | Lucy Edit Restyle | Core strength is localized identity-stable edits |
Identity-stable restyle ("astronaut in desert", "warm golden-hour lighting") | Lucy Edit Restyle | Specializes in temporal consistency for restyle |
Default if unspecified | Wan 2.7 Edit-Video | Most versatile, highest resolution |
The agent reads this table, classifies the user's intent, and picks the matching subsection below.
npm i -g @runcomfy/cli — a one-time setup step the user runs themselves; the agent leaves all package installs to the user. The user should pin and verify a reviewed version of the CLI before relying on it.runcomfy login, run by the user.RUNCOMFY_TOKEN from a secret store or CI secret.--input argument is parsed by the shell before the CLI sees it. Build the body as valid JSON, escape every apostrophe in user text as shown in the Route 1 example, and stop and ask the user if a value cannot be safely quoted. This applies to every route.Model: wan-ai/wan-2-7/edit-video
| Field | Type | Required | Default | Notes |
|---|---|---|---|---|
| string | yes | — | Lead with preservation. One edit direction per call. |
| string | yes | — | MP4/MOV URL, 2–10s, ≤100MB. |
| string | no | — | URL — use for direct design / appearance transfer only. |
| enum | no | (input) |
|
| enum | no | (input) | W:H. Defaults to input. |
| int | no | 0 |
|
| enum | no |
|
|
| int | no | — | Reproducibility. |
Background swap, identity preserved, audio kept:
Packaging swap with reference image:
"Preserve [face / pose / motion / framing / lip movement]; [then state the change]".reference_image only when justified (packaging swap, costume swap with target visual). Don't pass refs for general restyle.audio_setting: "origin" for talking-head where you don't want soundtrack regenerated.Model: kling/kling-2-6/motion-control-pro
Use when the user wants to transfer the motion of a reference video onto a target character (driven by an image OR another video). This isn't restyle — it's motion mapping with identity hold.
| Field | Type | Required | Notes |
|---|---|---|---|
| string | yes | Describe target motion / style. |
| string | yes (image orientation) | Reference for character / background consistency. |
| string | yes | Motion reference. 10–30s depending on orientation. |
| bool | no | Preserve audio from reference video. |
| enum | yes |
|
"character on left side, background motion right".character_orientation: "image" caps output at 10s; "video" allows 30s.Model: decart/lucy-edit/restyle
Use when the edit is localized style modification — outfit swap, scene relight, atmospheric restyle — and identity preservation is critical. Lighter-weight than Wan 2.7 Edit; capped at 720p.
| Field | Type | Required | Default | Notes |
|---|---|---|---|---|
| string | yes | — | Natural-language edit instruction. |
| string | yes | — | MP4/MOV/WEBM/GIF. |
| enum | no |
|
|
Outfit swap:
Atmospheric restyle:
"preserve face and motion" is enough; don't over-specify.| code | meaning |
|---|---|
0 | success |
64 | bad CLI args |
65 | bad input JSON / schema mismatch |
69 | upstream 5xx |
75 | retryable: timeout / 429 |
77 | not signed in or token rejected |
Full reference: docs.runcomfy.com/cli/troubleshooting.
The skill picks one of Wan 2.7 Edit-Video / Kling 2.6 Pro Motion Control / Lucy Edit Restyle based on user intent and invokes runcomfy run <model_id> with the matching JSON body. The CLI POSTs to the Model API, polls the request, fetches the result, and downloads any .runcomfy.net/.runcomfy.com URL into --output-dir. Ctrl-C cancels the remote request before exit.
runcomfy login writes the API token to ~/.config/runcomfy/token.json with mode 0600 (owner-only read/write). Set RUNCOMFY_TOKEN env var to bypass the file entirely in CI / containers.--input. The surrounding shell parses that argument first, so follow the shell quoting rule above for every route.model-api.runcomfy.net (request submission) and *.runcomfy.net / *.runcomfy.com (download whitelist for generated outputs). No telemetry, no callbacks.Get started with chainctlchainctl skill install public/doany-ai/video-edit:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/doany-ai/video-edit:latest
MIT
HARDENING.md
LICENSE
SKILL.md