Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ariffazil/aaa/comfyuinpx skills add ariffazil/AAA --skill comfyuigit clone --depth 1 https://github.com/ariffazil/AAAWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00046 | $0.06342 |
| Opus 5 | $0.00023 | $0.03171 |
| Sonnet 5 | $0.00009 | $0.01268 |
| Haiku 4.5 | $0.00005 | $0.00634 |
Grade B, and why
comfyui scanned grade B with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLlowData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
curl -X POST http://127.0.0.1:8188/queue -d '{"clear": true}' # cancel pending Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Downloads and executes remote codemediumSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -s http://127.0.0.1:8188/queue | python3 -m json.tool Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s http://127.0.0.1:8188/system_stats 2>/dev/null && echo "server: running" The source is not reproduced here
Licensed AGPL-3.0
The repository is licensed AGPL-3.0, which this catalogue does not treat as permission to reproduce the file. Read it at the source.
What ships with it
32 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/official-cli.md 7.4 KB
- references/rest-api.md 10 KB
- references/template-integrity.md 8.6 KB
- references/workflow-format.md 7.8 KB
- scripts/_common.py 33 KB runs code
- scripts/auto_fix_deps.py 8.1 KB runs code
- scripts/check_deps.py 17 KB runs code
- scripts/comfyui_setup.sh 10 KB runs code
- scripts/extract_schema.py 11 KB runs code
- scripts/fetch_logs.py 5.6 KB runs code
- scripts/hardware_check.py 17 KB runs code
- scripts/health_check.py 8.0 KB runs code
- scripts/run_batch.py 8.9 KB runs code
- scripts/run_workflow.py 31 KB runs code
- scripts/ws_monitor.py 10 KB runs code
- tests/conftest.py 1.4 KB runs code
- tests/pytest.ini 132 B
- tests/README.md 2.1 KB
- tests/test_check_deps.py 2.3 KB runs code
- tests/test_cloud_integration.py 4.2 KB runs code
- tests/test_common.py 16 KB runs code
- tests/test_extract_schema.py 7.8 KB runs code
- tests/test_run_workflow.py 8.5 KB runs code
- workflows/animatediff_video.json 2.0 KB
- workflows/flux_dev_txt2img.json 2.2 KB
- workflows/README.md 3.8 KB
- workflows/sd15_txt2img.json 1.4 KB
- workflows/sdxl_img2img.json 1.6 KB
- workflows/sdxl_inpaint.json 1.8 KB
- workflows/sdxl_txt2img.json 1.4 KB
- workflows/upscale_4x.json 864 B
- workflows/wan_video_t2v.json 2.1 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 613 lines · 46 tokens per session scan B fc9514a3b888
comfyui is a skill published in the GitHub repository ariffazil/AAA (2 stars, last pushed 3d ago), licensed AGPL-3.0. It adds 46 tokens to every session and 6,342 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 3 findings (sends data to an external url, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
prompt-cache-agent-harness
Plan and inspect prompt-cache behavior for long-running Claude agent loops. Use when a user wants to split stable tool, system, and history context into cacheable layers, compare captured cache metadata, estimate cost impact from supplied pricing inputs, or keep durable memory outside the cached prefix.
vertex-ai
Build and deploy ML models and generative AI workloads — models, prompts, tuning and endpoints — on Vertex AI. Covers Model Garden, the Gemini API, custom training, endpoint deployment, and IAM. Warns before deploying endpoints (billable). Integrates with Vertex AI MCP server. Use when the user mentions: Gemini on…
arifOS-Langfuse
Instrument arifOS constitutional AI kernel with Langfuse LLM tracing. Use when (1) adding Langfuse tracing to arifOS tool calls, (2) wiring arifOS telemetry to Langfuse cloud or self-hosted, (3) querying arifOS trace data from Langfuse, (4) migrating arifOS mindreason/heartcritique calls to Langfuse spans. DITEMPA…
arif-a2a-call
A2A v1.0.0 client + 888 JUDGMENT integration for OPENCLAW. Use when candidate actions require ASI deliberation or A2A federation with APEX (formerly Hermes).
ai-elements
Build AI chat interfaces using ai-elements components — conversations, messages, tool displays, prompt inputs, and more. Use when the user wants to build a chatbot, AI assistant UI, or any AI-powered chat interface.
azure-openai-to-responses
Migrate Python apps from Azure OpenAI Chat Completions to the Responses API. Covers AzureOpenAI/AsyncAzureOpenAI client migration to the v1 endpoint, streaming, tools, structured output, multi-turn, EntraID auth, and model compatibility checks. Python-focused, Azure OpenAI-specific. USE FOR: migrate to responses API…