Security audit
@openclaw/comfy-provider
Security checks for vulnerabilities and agentic risk
Overview
The package’s capabilities fit its stated purpose of generating images, video, and music through user-configured ComfyUI workflows.
Use trusted workflows and server addresses. Cloud mode sends your workflow, prompts, reference images, and API key to the configured endpoint. Keep local ComfyUI access restricted and protect authentication using secret references. Review the [configuration documentation](https://docs.openclaw.ai/providers/comfy).
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.