comfy-ui

Fail

Audited by Snyk on Jun 30, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). This URL points to a personal GitHub repository (spooky-may) with an unverified/likely low-reputation author and the skill is installed via "npx clawhub@latest" (which will execute remote code), making it a suspicious source for distributing executables or malware.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 30, 2026, 11:03 PM
Issues
1
Security Audit — snyk — comfy-ui