OpenClaw ComfyUI
v1.0.4Connect and control ComfyUI API efficiently using template mapping and auto-asset management for image generation and editing tasks.
⭐ 9· 1.9k·15 current·17 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim: connect to and control ComfyUI for image generation/editing. The repository contains workflow JSONs and a Python client that reads a ComfyUI host from workspace TOOLS.md and performs uploads, prompts, polling, and downloads — exactly what is needed to implement the described capability.
Instruction Scope
SKILL.md instructs the agent to run the bundled comfy_client.py with a template_id and prompt. The script reads workspace TOOLS.md for Host/Port, substitutes prompts into local workflow JSONs, uploads any provided local input files to the configured ComfyUI host, polls for results, and downloads generated files to outputs/comfy/. These actions are within scope for controlling a ComfyUI instance, but be aware the script will upload any input file you pass (allowed extensions include images, video, audio). Also the included workflow JSONs embed explicit/sexual prompt text — review content policy implications before use.
Install Mechanism
Instruction-only skill with a visible Python script. No install spec or remote download/exec behavior is present. The only runtime dependency is the requests Python package (mentioned in README), which is reasonable for the task.
Credentials
The skill requests no environment variables or credentials. It reads a local TOOLS.md file to get the ComfyUI host/port; this is reasonable for a tool intended to contact a ComfyUI server. There are no unrelated credentials or config paths requested.
Persistence & Privilege
always:false and user-invocable:true. The skill does not alter other skills or system-wide configs. It runs only when invoked and only touches its own workflows and outputs directory.
Assessment
This skill appears to do what it claims, but check these before installing: 1) Verify the TOOLS.md host/port entry points to a trusted ComfyUI server (the script will upload local files to that host — if TOOLS.md points to an untrusted remote, sensitive files could be transmitted). 2) Only pass input files you intend to upload; the script will POST them to the configured host. 3) Inspect workflows/ for any embedded prompts (the included JSONs contain explicit sexual content and may violate usage policies). 4) Run the skill in a constrained environment (local or isolated VM/container) if you are unsure about the target ComfyUI host. 5) Ensure Python dependencies (requests) are installed from trusted sources. If you want additional assurance, review or run the Python script locally with a deliberately misconfigured or local-only TOOLS.md to observe behavior before enabling agent-autonomous calls.Like a lobster shell, security has layers — review code before you run it.
latestvk9704gmca11cmhgsz3cb90nsms81efrj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.