Skills flux-2-klein

📦

flux-2-klein

Name: flux-2-klein
Author: runcomfy-com

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Generate Flux 2 Klein Images on RunComfy

Fast image models need precise prompts and variant choices. This skill guides Flux 2 Klein generation through RunComfy with practical defaults.

Supports: Claude Codex Code(CC)

⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "flux-2-klein" from https://skillstore.io/skills/runcomfy-com-flux-2-klein.md and its manifest at https://skillstore.io/api/skills/runcomfy-com-flux-2-klein/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/runcomfy-com-flux-2-klein.md Signed manifest GET /api/skills/runcomfy-com-flux-2-klein/manifest Signed lockfile GET /api/skills/runcomfy-com-flux-2-klein/lockfile

Test it

Using "flux-2-klein". Create a fast concept for a ceramic mug on a wooden table with soft morning light.

Expected outcome:

Selected Flux 2 Klein 4B for rapid iteration.
Produced a subject-first prompt with product, surface, lighting, lens, and quality details.
Recommended a square preview size and a low step count for concept review.

Using "flux-2-klein". Make a polished brand image from two reference photos with the same composition and updated label color.

Expected outcome:

Selected Flux 2 Klein 9B for stronger detail and final polish.
Preserved composition and lighting while changing the label color in the prompt.
Flagged that reference images are sent to RunComfy for processing.

Using "flux-2-klein". Generate a wide hero image for a website at very high resolution.

Expected outcome:

Explained the 16:9 aspect ratio and approximate 2K output ceiling.
Suggested a wide supported size for Flux 2 Klein.
Recommended another model when native 4K output is required.

Security Audit

Medium Risk

v4 • 7/5/2026 Open versioned report

The main confirmed risks are intentional RunComfy CLI execution and outbound submission to RunComfy hosted model APIs. Most static hits are Markdown backticks, documentation links, ellipsis URL paths, or harmless wording, and I found no prompt injection attempt. Users should treat prompts, reference media, and token-backed requests as third-party data processing.

Files scanned

224

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:206-209 SKILL.md:219-222

Third-party API receives prompts and references

The skill directs the RunComfy CLI to send user prompts, bearer-token authenticated requests, and referenced media workflows to RunComfy hosted model infrastructure.

The file explicitly describes POSTing to model-api.runcomfy.net with a bearer token and notes that external media URLs are processed by RunComfy.

Capability review items (12)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:13

Ruby/shell backtick execution

`runcomfy run blackforestlabs/flux-2-klein/9b/text-to-image` (or

This line documents the RunComfy CLI command the skill is meant to invoke. It is intentional external command execution that can submit user content to a third-party service.

Medium

SKILL.md:14

Ruby/shell backtick execution

`/4b/`) through the local RunComfy CLI. Triggers on "flux 2 klein",

This line continues the documented RunComfy model path for the 4B variant. It is part of the intentional CLI invocation surface, not Ruby execution.

Medium

SKILL.md:27-29

Ruby/shell backtick execution

```bash

The fenced block contains an npx command that installs a skill globally from a remote repository. That is a real shell command users or agents could execute.

Medium

SKILL.md:49-50

Ruby/shell backtick execution

1. **RunComfy CLI** — `npm i -g @runcomfy/cli`

The prerequisite instructs installing a global RunComfy CLI package. Global package installation is legitimate for this skill but remains external command execution.

Medium

SKILL.md:50-51

Ruby/shell backtick execution

2. **RunComfy account** — `runcomfy login` opens a browser device-code flow.

The prerequisite instructs running runcomfy login, which starts an authentication flow. This is expected behavior but creates a local credential and account dependency.

Medium

SKILL.md:82-86

Ruby/shell backtick execution

```bash

The fenced block contains a runcomfy run command for the 4B model. It intentionally runs a local CLI and sends the prompt to RunComfy.

Medium

SKILL.md:90-99

Ruby/shell backtick execution

```bash

The fenced block contains a runcomfy run command for the 9B model with user-provided input. This is expected but still an external command path.

Medium

SKILL.md:103-107

Ruby/shell backtick execution

```bash

The fenced block contains another runcomfy run command with size parameters. It is a legitimate invocation but confirms external command use.

Medium

SKILL.md:113-116

Ruby/shell backtick execution

```bash

The fenced block contains a pipe-friendly runcomfy command with jq processing. This is a real shell pipeline pattern, although it is documented transparently.

Medium

SKILL.md:206-207

Ruby/shell backtick execution

1. The skill invokes `runcomfy run blackforestlabs/flux-2-klein/<variant>/text-to-image` with a JSON

The how-it-works section says the skill invokes the RunComfy CLI with a JSON body. This confirms intentional external command execution by design.

Medium

SKILL.md:219

Ruby/shell backtick execution

- **Token storage**: `runcomfy login` writes the API token to `~/.config/runcomfy/token.json` with m

This line documents runcomfy login and the local token file used by the CLI. It is an expected credential flow, but it confirms command-driven authentication behavior.

Medium

SKILL.md:207

Hardcoded URL

2. The CLI POSTs to `https://model-api.runcomfy.net/v1/models/blackforestlabs/flux-2-klein/<variant>

The skill states that the CLI POSTs to model-api.runcomfy.net with the user bearer token. That is intentional third-party network submission of user requests.

Risk Factors

⚙️ External commands (42)

🌐 Network access (5)

SKILL.md:17 SKILL.md:23 SKILL.md:76 SKILL.md:202 SKILL.md:207

📁 Filesystem access (5)

SKILL.md:208 SKILL.md:209 SKILL.md:210 SKILL.md:219 SKILL.md:219

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/runcomfy-com-flux-2-klein/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/runcomfy-com-flux-2-klein/security.svg)](https://skillstore.io/skills/runcomfy-com-flux-2-klein?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/runcomfy-com-flux-2-klein?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/runcomfy-com-flux-2-klein/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/runcomfy-com-flux-2-klein.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

runcomfy-com. (2026). flux-2-klein security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/runcomfy-com-flux-2-klein/audits/4

BibTeX citation

@techreport{runcomfy-com-runcomfy-com-flux-2-klein-2026,
  author = {runcomfy-com},
  title = {flux-2-klein security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/runcomfy-com-flux-2-klein/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "flux-2-klein security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "runcomfy-com"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/runcomfy-com-flux-2-klein/audits/4"
identifiers:
  - type: other
    value: "skillstore:runcomfy-com-flux-2-klein:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

3 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

agentspace-so Recommended

agentspace-so-flux-2-klein

Skillstore Score 75

Evidence Confidence High

Skillstore usage 7

Updated

2026-08-21

doany-ai

doany-ai-flux-2-klein

Skillstore Score 50

Evidence Confidence High

Skillstore usage 20

Updated

2026-08-21

runcomfy-com Current

runcomfy-com-flux-2-klein

Skillstore Score 50

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create rapid visual concepts

Use the 4B variant to explore art direction quickly before choosing a final image direction.

Generate product asset drafts

Use structured prompts for product photos, lighting, framing, and e-commerce style previews.

Prepare branded image variations

Use aligned reference images to keep style, composition, and visual identity consistent across assets.

Try These Prompts

Start a quick concept

Use Flux 2 Klein 4B to create a quick concept image of [subject] in [scene]. Keep the prompt concise and show the chosen settings.

Improve a product prompt

Rewrite my product image prompt for Flux 2 Klein. Include subject, scene, lighting, camera, composition, and quality details.

Plan reference guided generation

Prepare a Flux 2 Klein prompt that keeps the style of my reference images while changing [target change]. Note any reference image risks.

Choose the right model path

Evaluate this image request for Flux 2 Klein 4B, Flux 2 Klein 9B, or another model. Explain the route and generation settings.

Best Practices

Start prompts with the main subject, then add scene, style, lighting, camera, and quality details.
Use 4B for fast exploration and 9B when the selected direction needs more polish.
Keep reference images visually aligned so style guidance remains consistent.

Avoid

Do not send sensitive prompts, private images, or confidential brand references to hosted model APIs.
Do not request unsupported 4K output or extreme aspect ratios from Flux 2 Klein.
Do not mix conflicting styles or long vague prompt text when precise output is needed.

Frequently Asked Questions

Does this skill run Flux 2 Klein locally?

No. It uses the RunComfy CLI to call hosted RunComfy model endpoints.

Which variant should I use for fast drafts?

Use Flux 2 Klein 4B for rapid concepting and live iteration.

Which variant should I use for final images?

Use Flux 2 Klein 9B when you need stronger detail and polished output.

Can it use reference images?

Yes. The skill documents reference image use, but those references are processed by RunComfy.

Does it support precise text inside images?

It can help with simple text, but another model is better for heavy or multilingual text.

What authentication is required?

You need a RunComfy login or a RUNCOMFY_TOKEN environment variable for CLI access.

Developer Details

Author

runcomfy-com

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/runcomfy-com/skills/tree/main/flux-2-klein/

Ref

62e2a730c5cd74eab4c7164309d810de660fcea3

Maintenance freshness

7/18/2026

Usage

3 downloads · 0 views

File structure

📄 SKILL.md