📦 Thor Generator — 本地AI绘图
v1.0.0基于 ComfyUI Thor 工作流，在用户本地环境将文本提示词一键生成高质量图像，无需联网即可快速出图。
0· 981·3 当前·3 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill plausibly does what it says (run a local ComfyUI script) but its runtime instructions require and execute a specific local repository, virtualenv, and Python script without declaring those requirements or offering any safeguards — that mismatch is concerning.
评估建议
This skill tells the agent to run a local shell command that activates a virtualenv and executes thor_generate_image.py in ~/ComfyUI — before installing or enabling it: 1) Verify ~/ComfyUI, the venv, and thor_generate_image.py actually exist on the target machine. 2) Inspect the contents of thor_generate_image.py to ensure it only performs the expected image-generation steps and does not exfiltrate data or run other system commands. 3) Ensure python3 and the virtualenv are from trusted sources. ...详细分析 ▾
⚠ 用途与能力
The description says 'generate images locally with ComfyUI Thor', which matches the SKILL.md command. However the metadata declares no required binaries or config paths, while the instructions assume ~/ComfyUI exists, a venv at venv/bin/activate, python3 is available, and a local script thor_generate_image.py is present. Those are reasonable runtime requirements for this purpose but should have been declared; the omission is an inconsistency.
⚠ 指令范围
SKILL.md instructs the agent to run a shell command via exec that cd's into ~/ComfyUI, activates a venv, and runs a local Python script with the user prompt and an output path. That is within the stated purpose but it gives the agent the ability to execute arbitrary code contained in thor_generate_image.py and to read/write the user's filesystem (~/ComfyUI, ~/Desktop/bring_img). The instructions do not include checks, fallbacks if paths are missing, or a requirement to inspect the script first.
✓ 安装机制
There is no install spec and no code files bundled with the skill (instruction-only). That minimizes install-time risk because nothing is downloaded or written by the skill itself.
ℹ 凭证需求
The skill requests no environment variables or credentials, which is proportionate. However it implicitly requires local resources (Python, a virtualenv, the ComfyUI repo and a script) that are not declared in requires.* metadata. The absence of declared requirements makes it harder to judge whether the requested filesystem access is appropriate.
✓ 持久化与权限
always:false and no install means the skill does not request persistent/system-wide privileges or automatic inclusion. It does ask the agent to execute a command when invoked, which is the normal behavior for instruction-only skills.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/24
- Initial release of the Thor Image Generation Skill. - Enables high-quality image creation using the local ComfyUI "Thor" pipeline. - Accepts a text prompt as input and saves the generated image to ~/Desktop/bring_img. - Integrates with the `exec` tool to automate image generation via a specified Python script.
● 可疑
安装命令
点击复制官方npx clawhub@latest install thor-generator
镜像加速npx clawhub@latest install thor-generator --registry https://cn.longxiaskill.com