comfy-imagegen

SUSPICIOUS: the core local image capabilities match the stated purpose, but the skill mixes in remote API modes and helper installers/downloaders whose provenance is not established here. The biggest concern is data-flow integrity for Grok via a 'comfy-api' intermediary and the unspecified trust of the setup/downloader CLIs; this is medium risk rather than confirmed malware.