Skills from clawhub.ai/kelvincai522

This skill edits and runs local ComfyUI workflows (editing JSON, then running `~/ComfyUI/venv/bin/python skills/comfyui/scripts/comfyui_run.py`) and downloads model weights to `~/ComfyUI/models/<subfolder>/`. It executes local scripts and may download-and-run remote binaries (`https://github.com/replicate/pget/releases/latest/download`) and arbitrary model URLs, presenting a security risk.

Pget is a CLI for fast parallel HTTP(S)/S3/GCS downloads and optional in‑memory `.tar` extraction, supporting single URLs and multifile manifests. Dangerous behavior: the README instructs installing and executing a remote binary via `sudo curl -o /usr/local/bin/pget -L "https://github.com/replicate/pget/releases/latest/download/pget_$(uname -s)_$(uname -m)"` and `sudo chmod +x /usr/local/bin/pget`, and uses network endpoints like `https://storage.googleapis.com/replicant-misc/sd15.tar`.