← Back to Skills Marketplace
ComfyUI
by
kelvincai522
· GitHub ↗
· v1.0.1
6022
Downloads
3
Stars
39
Active Installs
2
Versions
Install in OpenClaw
/install comfyui
Description
Run local ComfyUI workflows via the HTTP API. Use when the user asks to run ComfyUI, execute a workflow by file path/name, or supply raw API-format JSON; supports the default workflow bundled in assets.
Usage Guidance
Install only if you intend this agent to manage a local ComfyUI setup. Prefer running downloads with --no-pget or installing pget yourself from a verified source, use trusted model URLs with hashes when available, avoid --overwrite on untrusted files, and review workflow JSON before running it.
Capability Analysis
Type: OpenClaw Skill
Name: comfyui
Version: 1.0.1
The skill is classified as suspicious due to the `scripts/download_weights.py` file. This script attempts to download and install the `pget` binary from a remote GitHub release URL (`https://github.com/replicate/pget/releases/latest/download/pget_{sysname}_{machine}`) to `~/.local/bin` if it's not already present, and then executes it. While this functionality is explicitly described in `SKILL.md` and intended for legitimate parallel downloads of model weights, the capability to download and execute a remote binary represents a significant supply chain risk and broad permission, even if the immediate intent is not malicious. The `assets/tmp-workflow.json` also contains a sensitive prompt, though the agent is instructed to edit workflows based on user input, not to exfiltrate this data.
Capability Assessment
Purpose & Capability
Running local ComfyUI workflows, editing workflow JSON, downloading model weights, and helping start/install ComfyUI are coherent with the image-generation purpose, but the capability set goes beyond a simple local workflow runner.
Instruction Scope
The skill can activate on generic image-generation requests while also instructing the agent to clone ComfyUI, install dependencies, start a local server, run supplied workflow JSON, and download external model files; those higher-impact actions are not gated by a clear confirmation step.
Install Mechanism
scripts/download_weights.py downloads the latest pget executable from GitHub into ~/.local/bin, chmods it executable, and runs it by default without a pinned version, checksum, or signature verification, although --no-pget is available.
Credentials
The model downloader accepts arbitrary URLs and writes into ~/ComfyUI/models; its decoded filename handling can allow encoded path separators or parent-directory segments to escape the intended model subfolder.
Persistence & Privilege
The skill does not request sudo or credentials, but it can make persistent changes under ~/ComfyUI and ~/.local/bin and may leave a local ComfyUI server running.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install comfyui - After installation, invoke the skill by name or use
/comfyui - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Weight downloads with pget, install-if-missing; server install instructions
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is ComfyUI?
Run local ComfyUI workflows via the HTTP API. Use when the user asks to run ComfyUI, execute a workflow by file path/name, or supply raw API-format JSON; supports the default workflow bundled in assets. It is an AI Agent Skill for Claude Code / OpenClaw, with 6022 downloads so far.
How do I install ComfyUI?
Run "/install comfyui" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is ComfyUI free?
Yes, ComfyUI is completely free (open-source). You can download, install and use it at no cost.
Which platforms does ComfyUI support?
ComfyUI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created ComfyUI?
It is built and maintained by kelvincai522 (@kelvincai522); the current version is v1.0.1.
More Skills