Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Free voice from Comfy UI + Qwen3 TTS

v1.0.0

Generate Russian male voice audio using ComfyUI with Qwen3 TTS node and save as MP3 for voice messages.

0· 2.1k·7 current·7 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill's name (ComfyUI + Qwen3 TTS) matches the instructions: it needs ComfyUI, the AILab_Qwen3TTSVoiceDesign_Advanced node, the Qwen3 model, and an output folder to save mp3 files. Nothing requested appears unrelated to the stated TTS purpose.
Instruction Scope
Instructions are narrowly scoped: start ComfyUI (via a desktop shortcut command), poll http://localhost:8000, POST a JSON prompt, wait for completion, then read the generated MP3 from a local output folder and send it as a voice message. Minor concerns: the instructions use hard-coded, system-specific paths (C:\Users\user\Desktop\ComfyUI.lnk and E:\Ai\Comfy UI\output\) which will fail or behave unexpectedly on other machines; the skill will attempt to launch a local shortcut and read a local folder, so it requires the agent/runtime to have access to launch processes and read that path.
Install Mechanism
No install spec or downloaded code; this is instruction-only, so nothing is written to disk by the skill itself and no external packages are fetched.
Credentials
No environment variables, credentials, or config paths are requested. The only resources referenced are local ComfyUI service on localhost and a local output directory—these are proportional to generating and retrieving TTS output.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes or cross-skill configuration. It will launch a local process (ComfyUI) and access local files, which is expected for this functionality.
Assessment
This skill is coherent for local TTS generation, but check these before installing: 1) Ensure you actually have ComfyUI, the AILab_Qwen3TTS plugin, and the Qwen3 model installed and licensed as required. 2) Confirm the hard-coded paths/shortcut match your machine (the SKILL.md uses C:\Users\user\Desktop\ComfyUI.lnk and E:\Ai\Comfy UI\output\); if not, edit the instructions or don't install. 3) Be aware the skill will try to start a local application and read a local folder (it needs permission to launch processes and access the filesystem). 4) The skill only talks to localhost, but generated audio may be sent out by the agent via your messaging function (message(asVoice=true))—consider whether that's acceptable for the content you plan to synthesize. 5) If you run this in an environment without those local resources, the skill will fail rather than silently do something else.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e50fahykw5hnsn28t4ac1px80afe5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments