comfyui-runner

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The core functionality of the skill is limited to performing an HTTP GET request to check the status of a service endpoint. The implementation in bin/cli.js uses the built-in fetch API to reach the /health endpoint of the configured ComfyUI server.
  • [DATA_EXPOSURE]: Documentation mentions support for credentials via environment variables (COMFYUI_USER, COMFYUI_PASS), but the current implementation in bin/cli.js does not access or use these variables, and there is no evidence of credential harvesting or sensitive data exfiltration.
  • [COMMAND_EXECUTION]: While the documentation suggests the skill can start or stop a server, the script contains a safety check that explicitly limits functionality to the 'status' action in its current environment, preventing unauthorized process management.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 12:14 AM
Security Audit — agent-trust-hub — comfyui-runner