v0.1.0

Comfy Story Video

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:15 AM.

Analysis

The artifacts coherently describe a local ComfyUI-based story video generator, with only expected notes about running local code, installing dependencies, and using local media/AI tools.

GuidanceThis skill appears safe to install if you are comfortable running a local Python media-generation script. Before use, make sure ComfyUI is intentionally running on localhost, install Python dependencies from trusted sources, and expect generated story, image, audio, and video files to be written under the skill's output directory.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

scripts/generate_story_video.py

COMFYUI_URL = "http://127.0.0.1:8188" ... requests.post(f"{COMFYUI_URL}/prompt" ...)

The script drives a local ComfyUI API to queue image-generation workflows, which is central to the skill's purpose and is also disclosed in SKILL.md.

User impactRunning the skill can consume local ComfyUI/GPU resources and create AI-generated images and media files.

RecommendationRun it only when you intend to generate media, keep ComfyUI bound to localhost, and review the workflow/model settings before use.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

SKILL.md

Python dependencies: `pip install websocket-client requests`; **FFmpeg** for audio conversion

The skill documents manual, unpinned package and tool dependencies, while the registry metadata lists no required binaries or environment requirements.

User impactThe registry may not fully warn users about what must be installed before the skill works.

RecommendationInstall dependencies in a virtual environment, use trusted package sources, and consider pinning dependency versions.

Unexpected Code Execution

SeverityLowConfidenceHighStatusNote

SKILL.md

python3 scripts/generate_story_video.py --theme "友谊" --scenes 5

The skill is instruction-only but asks the user or agent to execute the included Python script; this is expected for a local media-generation tool.

User impactUsing the skill means running local Python code and related media tools on the user's machine.

RecommendationReview the script, run it from the intended workspace, and avoid granting unnecessary system privileges.