comfyui-media-workflows
Fail
Audited by Snyk on Aug 19, 2026
Risk Level: HIGH
Full Analysis
HIGH W008: Secret detected in skill content (API keys, tokens, passwords).
- Secret detected (high risk: 1.00). I scanned all provided files for high-entropy, literal values that could be usable credentials. Most values in SKILL.md and EVAL.md are placeholders, example YAML fields, seeds, or documentation text (low entropy or explicitly placeholder-like) and are ignored per the rules.
However, tests/test_inspect_workflow.py contains a literal token-like string:
- "comfyui-87d01e28d0000000000000000000000000000000000000000" (high-entropy, token-looking) used as an api_key value in a test. Although it appears in a unit test, it is a literal, high-entropy string and therefore meets the definition of a secret for scanning purposes (it could represent an API key format). I am flagging it accordingly.
Issues (1)
W008
HIGHSecret detected in skill content (API keys, tokens, passwords).
Audit Metadata