comfyui

A workflow for generating images, video, and audio with ComfyUI, a visual system for connecting AI model steps into reusable workflows.

In plain words
What is it for?
Use it to install and launch ComfyUI, manage its models and nodes, and run workflows through its interface or programming API.
Why use it?
It brings installation, workflow management, and execution into one process, including changing workflow settings when needed.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/ariffazil/aaa/comfyui
Any agent
npx skills add ariffazil/AAA --skill comfyui
Clone the repo
git clone --depth 1 https://github.com/ariffazil/AAA

Made for: Claude Code, Codex.

Per session 46 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,342 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 3 findings. Scan, not verified.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00046 $0.06342
Opus 5 $0.00023 $0.03171
Sonnet 5 $0.00009 $0.01268
Haiku 4.5 $0.00005 $0.00634

Measured 2d ago against content hash fc9514a3b888, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

comfyui scanned grade B with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 17 executable files (scripts/_common.py, scripts/auto_fix_deps.py, scripts/check_deps.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Sends data to an external URLlowData exfiltration

A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.

curl -X POST http://127.0.0.1:8188/queue -d '{"clear": true}' # cancel pending

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

Downloads and executes remote codemediumSupply chain

curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.

curl -s http://127.0.0.1:8188/queue | python3 -m json.tool

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s http://127.0.0.1:8188/system_stats 2>/dev/null && echo "server: running"
.hermes-archived-2026-08-15/skills/creative/comfyui/SKILL.md · 613 lines

The source is not reproduced here

Licensed AGPL-3.0

The repository is licensed AGPL-3.0, which this catalogue does not treat as permission to reproduce the file. Read it at the source.

Read it on GitHub

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 613 lines · 46 tokens per session scan B fc9514a3b888

Subscribe to this mod's changes

comfyui is a skill published in the GitHub repository ariffazil/AAA (2 stars, last pushed 3d ago), licensed AGPL-3.0. It adds 46 tokens to every session and 6,342 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 3 findings (sends data to an external url, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

prompt-cache-agent-harness

Plan and inspect prompt-cache behavior for long-running Claude agent loops. Use when a user wants to split stable tool, system, and history context into cacheable layers, compare captured cache metadata, estimate cost impact from supplied pricing inputs, or keep durable memory outside the cached prefix.

Prompthon-IO/agent-systems-handbook · 61 tokens

vertex-ai

Build and deploy ML models and generative AI workloads — models, prompts, tuning and endpoints — on Vertex AI. Covers Model Garden, the Gemini API, custom training, endpoint deployment, and IAM. Warns before deploying endpoints (billable). Integrates with Vertex AI MCP server. Use when the user mentions: Gemini on…

jpantsjoha/googlecloud-plugin · 136 tokens

arifOS-Langfuse

Instrument arifOS constitutional AI kernel with Langfuse LLM tracing. Use when (1) adding Langfuse tracing to arifOS tool calls, (2) wiring arifOS telemetry to Langfuse cloud or self-hosted, (3) querying arifOS trace data from Langfuse, (4) migrating arifOS mindreason/heartcritique calls to Langfuse spans. DITEMPA…

ariffazil/arifOS · 109 tokens

arif-a2a-call

A2A v1.0.0 client + 888 JUDGMENT integration for OPENCLAW. Use when candidate actions require ASI deliberation or A2A federation with APEX (formerly Hermes).

ariffazil/arifOS · 51 tokens

ai-elements

Build AI chat interfaces using ai-elements components — conversations, messages, tool displays, prompt inputs, and more. Use when the user wants to build a chatbot, AI assistant UI, or any AI-powered chat interface.

ssdeanx/AgentStack · 46 tokens

azure-openai-to-responses

Migrate Python apps from Azure OpenAI Chat Completions to the Responses API. Covers AzureOpenAI/AsyncAzureOpenAI client migration to the v1 endpoint, streaming, tools, structured output, multi-turn, EntraID auth, and model compatibility checks. Python-focused, Azure OpenAI-specific. USE FOR: migrate to responses API…

microsoft/ai-agents-for-beginners · 185 tokens