flux-kontext
Enables precise local image editing using Flux 1 Kontext Pro on RunComfy, enhancing output quality with documented prompting patterns.
Install this skill
or
89/100
Security score
The flux-kontext skill was audited on May 14, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 163
Access to hidden dotfiles in home directory
SourceSKILL.md
| 163 | - **Token storage**: `runcomfy login` writes the API token to `~/.config/runcomfy/token.json` with mode 0600 (owner-only read/write). Set `RUNCOMFY_TOKEN` env var to bypass the file entirely in CI / c |
low line 17
External URL reference
SourceSKILL.md
| 17 | homepage: https://www.runcomfy.com |
low line 23
External URL reference
SourceSKILL.md
| 23 | [runcomfy.com](https://www.runcomfy.com/?utm_source=skills.sh&utm_medium=skill&utm_campaign=flux-kontext) · [Model page](https://www.runcomfy.com/models/blackforestlabs/flux-1-kontext-pro/image-to-ima |
low line 70
External URL reference
SourceSKILL.md
| 70 | "image": "https://.../portrait.jpg" |
low line 81
External URL reference
SourceSKILL.md
| 81 | "image": "https://.../bottle.jpg", |
low line 140
External URL reference
SourceSKILL.md
| 140 | - **Public RunComfy docs are minimal** — schema fields beyond prompt + image + aspect_ratio + seed may exist; check the [model page](https://www.runcomfy.com/models/blackforestlabs/flux-1-kontext-pro/ |
low line 159
External URL reference
SourceSKILL.md
| 159 | The skill invokes `runcomfy run blackforestlabs/flux-1-kontext/pro/edit` with a JSON body matching the schema. The CLI POSTs to `https://model-api.runcomfy.net/v1/models/blackforestlabs/flux-1-kontext |
Scanned on May 14, 2026
View Security Dashboard