comfyui-node-frontend
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides technical documentation and code snippets for extending the ComfyUI frontend. No malicious patterns, obfuscation, or unauthorized commands were detected.\n- [SAFE]: The documentation includes security-relevant information, such as the use of DOMPurify in renderMarkdownToHtml to ensure safe HTML generation from markdown content.\n- [NO_CODE]: The skill contains only documentation and non-executable reference examples; it does not deploy active scripts or background tasks.\n- [PROMPT_INJECTION]: While the API reference documents ingestion points for external data (e.g., WebSocket events via api.addEventListener, graph configuration data, and markdown strings), it provides sanitization utilities (DOMPurify) and follows standard client-side security practices. Evidence Chain: 1. Ingestion: Event listeners and graph loading hooks. 2. Boundaries: Sanitization helpers mentioned. 3. Capabilities: UI rendering and network requests. 4. Sanitization: DOMPurify explicitly referenced.
Audit Metadata