Stable Diffusion

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a benign instruction-only Stable Diffusion guide, though it includes normal third-party setup commands users should verify before running.

This skill appears safe as an informational assistant. Before using its setup commands, verify the GitHub repositories, run them in an isolated or virtual environment if possible, and be mindful that Stable Diffusion tooling may download large models and dependencies.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running these commands could install and execute third-party code on the user's machine.

Why it was flagged

The guide recommends cloning and running/installing third-party AI tooling. This is expected for a Stable Diffusion setup guide, but the skill does not pin versions or provide additional provenance checks.

Skill content
安装:`git clone https://github.com/AUTOMATIC1111/stable-diffusion-webui && ./webui.sh` ... `git clone https://github.com/comfyanonymous/ComfyUI && pip install -r requirements.txt`
Recommendation

Only run setup commands from trusted repositories, review the project instructions, and consider using a virtual environment or isolated machine for AI tooling.