Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add artokun/comfyui-mcp --skill civitaigit clone --depth 1 https://github.com/artokun/comfyui-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/artokun/comfyui-mcp/civitai)<a href="https://agentmods.dev/skills/artokun/comfyui-mcp/civitai"><img src="https://agentmods.dev/badge/skills/artokun/comfyui-mcp/civitai/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/artokun/comfyui-mcp/civitai"><img src="https://agentmods.dev/badge/skills/artokun/comfyui-mcp/civitai.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00076 | $0.01137 |
| Opus 5.5 | $0.00030 | $0.00455 |
| Sonnet 5.5 | $0.00015 | $0.00227 |
| Haiku 4.5 | $0.00008 | $0.00114 |
Grade A, and why
civitai scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 87 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Civitai + comfyui-mcp
comfyui-mcp has native Civitai search built in (download_model action:"search_civitai")
plus the local half of the loop: download, wire, queue, tag. The full flow
(find, install, generate) needs no other server and no API key, and works on
every backend, including small local models behind the compact router.
The built-in flow (default path)
download_model({ action: "search_civitai", query, types: ["LORA"], base_models: ["Flux.1 D"] })
│ each hit: model_id · model_version_id · trigger words
▼
download_model({ action: "download_civitai", model_version_id, target_subfolder: "loras" })
│
▼
list_local_models({ action: "list" }) → panel_add_node loader / generate_image # use it
- ALWAYS filter
base_modelswhen the user's checkpoint family is known. A Flux LoRA will not load on an SDXL checkpoint (seemodel-compatibility). CivitAI labels:Flux.1 D,SDXL 1.0,SD 1.5,Pony,Illustrious,Wan Video. target_subfoldermust match the model type:checkpoints,loras,vae,controlnet,embeddings,upscale_models, and so on.- Results are SFW-only by default (
nsfw: trueto opt in). - Each hit carries trigger words. Put them in the prompt after installing.
- Prefer
model_version_idovermodel_id. A Civitai page can list several versions and the user usually means a specific one.
Search needs no API key. CIVITAI_API_TOKEN (from
civitai.com/user/account) unlocks gated/early-access downloads and gated
search results. Set it once, in panel Settings under "Set CivitAI token…" or in env.
Recipes
"Find me a good anime LoRA for Flux and install it"
download_model({ action: "search_civitai", query: "anime style", types: ["LORA"], base_models: ["Flux.1 D"] }).- Present the top 3 to 5 with name, creator, base model, downloads, and the version id. Let the user pick.
download_model({ action: "download_civitai", model_version_id, target_subfolder: "loras" }).- In the panel,
panel_add_nodeaLoraLoader,panel_set_widgetthelora_name, wire it between checkpoint and sampler, and use the hit's trigger words in the prompt. Headless:generate_image(action="image")/ build the workflow.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 87 lines · 76 tokens per session scan A 75d1b62cbd44
civitai is a skill published in the GitHub repository artokun/comfyui-mcp (871 stars, last pushed yesterday), licensed MIT. It adds 76 tokens to every session and 1,137 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
pgvector-semantic-search
Use this skill for setting up vector similarity search with pgvector for AI/ML embeddings, RAG applications, or semantic search. Trigger when user asks to: Store or search vector embeddings in PostgreSQL Set up semantic search, similarity search, or nearest neighbor search Create HNSW or IVFFlat indexes for vectors…
postgres-hybrid-text-search
Use this skill to implement hybrid search combining BM25 keyword search with semantic vector search using Reciprocal Rank Fusion (RRF). Trigger when user asks to: Combine keyword and semantic search Implement hybrid search or multi-modal retrieval Use BM25/pgtextsearch with pgvector together Implement RRF (Reciprocal…
chief-data-officer
Owns data as an asset — governance, quality, the warehouse and semantic layer, analytics capability, and the governance of models built on top. Use this for a decision about how data is collected, stored, defined, or shared; when numbers disagree between teams; when deciding what to build in-house versus buy; when…
ai-workflow-architect
Designs AI systems, automations, and agent workflows for a business — identifying which manual work is worth automating, how to structure the system, which tools fit, and what could go wrong. Use this to automate part of an operation, design an agent or MCP workflow, reduce repetitive manual work, connect tools into a…
ai-ml-governance
Governs models and AI systems in production — intended use, evaluation, monitoring, human oversight, documentation, and the decision to deploy or retire. Use this before deploying a model or AI feature, when defining evaluation criteria, when a model's behavior has drifted, when assessing AI risk or regulatory…
data-engineering
Builds and operates data pipelines — ingestion, transformation, orchestration, quality testing, and reliability of data delivery. Use this to design or debug a pipeline, decide batch versus streaming, add data quality checks, handle late or duplicate data, or work out why a dashboard's numbers changed without anyone…