comfyui-runner
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The core functionality of the skill is limited to performing an HTTP GET request to check the status of a service endpoint. The implementation in
bin/cli.jsuses the built-infetchAPI to reach the/healthendpoint of the configured ComfyUI server. - [DATA_EXPOSURE]: Documentation mentions support for credentials via environment variables (
COMFYUI_USER,COMFYUI_PASS), but the current implementation inbin/cli.jsdoes not access or use these variables, and there is no evidence of credential harvesting or sensitive data exfiltration. - [COMMAND_EXECUTION]: While the documentation suggests the skill can start or stop a server, the script contains a safety check that explicitly limits functionality to the 'status' action in its current environment, preventing unauthorized process management.
Audit Metadata