comfyui-media-workflows

Fail

Audited by Snyk on Aug 19, 2026

Risk Level: HIGH
Full Analysis

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

  • Secret detected (high risk: 1.00). I scanned all provided files for high-entropy, literal values that could be usable credentials. Most values in SKILL.md and EVAL.md are placeholders, example YAML fields, seeds, or documentation text (low entropy or explicitly placeholder-like) and are ignored per the rules.

However, tests/test_inspect_workflow.py contains a literal token-like string:

  • "comfyui-87d01e28d0000000000000000000000000000000000000000" (high-entropy, token-looking) used as an api_key value in a test. Although it appears in a unit test, it is a literal, high-entropy string and therefore meets the definition of a secret for scanning purposes (it could represent an API key format). I am flagging it accordingly.

Issues (1)

W008
HIGH

Secret detected in skill content (API keys, tokens, passwords).

Audit Metadata
Risk Level
HIGH
Analyzed
Aug 19, 2026, 09:31 AM
Issues
1
Security Audit — snyk — comfyui-media-workflows