comfy-tools-setup
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the 'comfy-agent-tools' package from the author's GitHub repository (quinteroac/comfy-agent-tools) using the 'uv' package manager.
- [EXTERNAL_DOWNLOADS]: The skill installs the 'modal' CLI tool, which is a well-known service for cloud execution.
- [COMMAND_EXECUTION]: The skill contains instructions for the agent to execute shell commands to validate tool installations (e.g., 'command -v'), initialize configurations ('comfy-models init'), and manage environment settings.
- [CREDENTIALS_UNSAFE]: While the skill mentions sensitive Modal credentials (MODAL_TOKEN_ID, MODAL_TOKEN_SECRET), it specifically warns against writing them to the repository and advises the user to provide them through environment variables, demonstrating secure credential handling practices.
Audit Metadata