← 返回 Skills 市场
image
作者
TobeyRebecca
· GitHub ↗
· v1.0.0
· MIT-0
95
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install toby-image
功能描述
Run local ComfyUI workflows via the HTTP API. Use when the user asks to run ComfyUI, execute a workflow by file path/name, or supply raw API-format JSON; sup...
安全使用建议
This skill appears to do what it says: edit workflow JSON and queue runs against a local ComfyUI server, plus download model weights into ~/ComfyUI/models/. Before installing or running it: 1) Review the two scripts (comfyui_run.py and download_weights.py) yourself — they will make network requests (to localhost and to URLs you provide) and write files to your home directory. 2) Only provide model URLs you trust (downloading arbitrary URLs can place malicious or large files on disk). 3) Be aware the download script will attempt to install a pget binary to ~/.local/bin if missing. 4) Ensure you are comfortable running commands that clone/install ComfyUI and running the ComfyUI server locally. 5) Note minor metadata inconsistencies (declared required binaries vs registry metadata and a name mismatch); these are bookkeeping issues but review SKILL.md before use. If you want stronger assurance, run the scripts in a controlled environment (container or VM) first.
功能分析
Type: OpenClaw Skill
Name: toby-image
Version: 1.0.0
The skill bundle is classified as suspicious primarily because `scripts/download_weights.py` automatically downloads and executes a binary (`pget`) from a remote GitHub URL (replicate/pget) if it is not found in the local PATH, which constitutes a supply-chain risk. Additionally, `SKILL.md` instructs the AI agent to perform high-risk system operations including `git clone` and `pip install` for environment setup. Finally, `assets/tmp-workflow.json` contains a NSFW image generation prompt, which is unexpected for a standard utility bundle.
能力评估
Purpose & Capability
The skill's name/description (run local ComfyUI workflows) matches the included artifacts: a run script that posts workflow JSON to a local ComfyUI HTTP API and a download script that saves model weights into ~/ComfyUI/models/. The ability to inspect and edit workflow JSON and to download model weights is expected for this purpose. Minor inconsistencies: registry metadata lists no required binaries while SKILL.md metadata notes python3 is required, and the top-level skill name ('image') differs from SKILL.md's declared name ('ComfyUI'). These are metadata mismatches but do not indicate malicious behavior.
Instruction Scope
SKILL.md explicitly instructs the agent to read and modify workflow JSON (prompt/style/seed fields), write a temp workflow file, and run the bundled run script which posts to the local API (127.0.0.1:8188). It also instructs how to install/run ComfyUI if not present and how to run the download script for model URLs. All referenced files/paths (~/ComfyUI, skills/comfyui/assets/tmp-workflow.json, ~/.local/bin for pget) are coherent with the stated goal. Note: editing arbitrary workflow JSON is powerful — workflows may contain user-provided or sensitive prompts; the agent must only modify fields necessary for generation.
Install Mechanism
There is no formal install spec (instruction-only), but code files are bundled and intended to be run locally. The download script may fetch the pget binary from GitHub Releases (https://github.com/replicate/pget/releases/latest/download/<asset>) and will write it to ~/.local/bin if missing; this is a legitimate helper but does write an executable to the user's home directory. Downloading model URLs (arbitrary URLs provided by the user) will write files under ~/ComfyUI/models/<subfolder> and can store large binaries. These behaviors are expected for the functionality but are higher-risk than pure instruction-only skills because they create files and executables on disk.
Credentials
The skill does not request environment variables, credentials, or access to unrelated services. It uses local filesystem paths (home dir, ~/ComfyUI) and network access to the local ComfyUI server and to user-supplied model URLs — all relevant to its purpose. One minor mismatch: SKILL.md metadata signals a dependency on python3 (a reasonable runtime requirement) but the registry requirements block lists none.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent settings. It does create or write to user-local paths (~/.local/bin for pget and ~/ComfyUI/models/ for weights) and will save edited workflows under the skill assets/tmp-workflow.json; these are scoped to the user's home and the ComfyUI install and are proportional to the task. The automatic attempt to install pget into ~/.local/bin is a persistent change the user should be aware of.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install toby-image - 安装完成后，直接呼叫该 Skill 的名称或使用
/toby-image触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the toby-image (ComfyUI) skill.
- Enables running local ComfyUI workflows via the HTTP API, including user-supplied workflow files or raw JSON.
- Supports editing workflow prompts, styles, and seeds before execution.
- Allows downloading model weights from user-provided URLs directly into ComfyUI's model folders.
- Sends generated images back to the user after every successful run.
元数据
常见问题
image 是什么？
Run local ComfyUI workflows via the HTTP API. Use when the user asks to run ComfyUI, execute a workflow by file path/name, or supply raw API-format JSON; sup... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 95 次。
如何安装 image？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install toby-image」即可一键安装，无需额外配置。
image 是免费的吗？
是的，image 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
image 支持哪些平台？
image 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 image？
由 TobeyRebecca（@tobeyrebecca）开发并维护，当前版本 v1.0.0。
推荐 Skills