ClawHub
Back to skill

Security audit

comfyui-runner

Security checks across malware telemetry and agentic risk

Overview

This skill is a simple ComfyUI health-check CLI; its documentation overstates run/stop and auth support, but the code only performs a configurable status request.

Install only if you want a status-only ComfyUI health checker. Set COMFYUI_HOST and COMFYUI_PORT to your own trusted instance, and do not rely on run, stop, or basic-auth behavior unless a future reviewed version actually implements them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill declares no permissions while its documented behavior clearly relies on environment-variable access and network connectivity. This is dangerous because it hides the true capability surface from users and policy systems, reducing informed consent and making network-reaching behavior harder to govern or sandbox.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill exposes a `stop` action that can terminate a local ComfyUI service but does not prominently warn users about the disruptive effect. This is dangerous because a user or calling agent may invoke it without understanding it can interrupt active jobs, causing denial of service, lost work, or unexpected shutdown of a locally running service.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
bin/cli.js:4