registry / comfyui-mcp / 0.23.2

comfyui-mcp@0.23.2

⚠ Under review

Local-first, agent-native control plane for ComfyUI — MCP server + autonomous AI agent that drives your live graph in natural language from a sidebar agent on Claude OR ChatGPT (your own subscription, no API key). Generate images, video & audio, author an

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 179 file(s), 1.56 MB of source, external domains: 127.0.0.1, abcd-8188.proxy.runpod.net, api.comfy.org, api.github.com, civitai.com, cloud.comfy.org, docs.comfy.org, example.invalid, github.com, huggingface.co, mcp.civitai.com, raw.githubusercontent.com, registry.comfy.org, registry.npmjs.org

Source & flagged code

9 flagged

package.jsonView file

Lines 19-59json

19 ],

20 "scripts": {

21 "sync-agents": "node scripts/sync-agents.mjs",

22 "build": "tsc",

23 "dev": "tsx src/index.ts",

24 "dev:agent-poc": "tsx src/experimental/run.ts",

25 "start": "node dist/index.js",

26 "test": "vitest run --passWithNoTests",

27 "smoke": "npm run build && node scripts/smoke-install.mjs",

28 "test:watch": "vitest",

29 "test:integration": "cross-env COMFYUI_INTEGRATION=true vitest run",

30 "test:agent": "npm run build && node scripts/test-agent.mjs",

31 "lint": "tsc --noEmit",

32 "docs:gen": "cross-env COMFYUI_URL=http://127.0.0.1:8188 tsx scripts/gen-tool-docs.ts",

33 "packs:gen": "node scripts/gen-pack-installers.mjs",

34 "packs:validate": "node scripts/validate-manifests.mjs",

35 "packs:test": "bash scripts/test-packs.sh",

36 "packs:check-urls": "node scripts/check-model-urls.mjs",

37 "packs:check-models": "node scripts/check-pack-models.mjs",

38 "packs:verify-render": "node scripts/verify-render.mjs",

39 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 "generations:stats": "node scripts/generation-stats.mjs",

41 "release": "npm version patch && git push --follow-tags",

42 "release:minor": "npm version minor && git push --follow-tags",

43 "release:major": "npm version major && git push --follow-tags"

44 },

45 "dependencies": {

46 "@modelcontextprotocol/sdk": "^1.12.1",

47 "@stable-canvas/comfyui-client": "^1.5.9",

48 "better-sqlite3": "^12.6.2",

49 "dotenv": "^16.4.7",

50 "sharp": "^0.34.5",

51 "ws": "^8.21.0",

52 "yaml": "^2.9.0",

53 "zod": "^4.0.0"

54 },

55 "optionalDependencies": {

56 "@anthropic-ai/claude-agent-sdk": "^0.3.197",

57 "@openai/codex": "~0.141.0",

58 "@ai-sdk/anthropic": "^3.0.79",

59 "@ai-sdk/google": "^3.0.79",

dist/services/node-management.jsView file

Lines 1-21javascript

1import { execFileSync } from "node:child_process";

2import { randomUUID } from "node:crypto";

High

Child Process

Package source references child process execution.

dist/services/node-management.jsView on unpkg · L1

3import { existsSync } from "node:fs";

4import { basename, isAbsolute, join, relative, resolve } from "node:path";

dist/services/env-capabilities.jsView file

Lines 1-26javascript

1// Live ENVIRONMENT-CAPABILITIES probe for the panel orchestrator.

2//

3// Gathered ONCE at orchestrator startup (or lazily on the first tab) and CACHED,

4// then prepended as a compact one-line block to the panel agent's system prompt

5// so the agent is immediately aware of the machine — no probing, no guessing.

6//

7// Every probe is best-effort and time-bounded: a hung ComfyUI, a slow PowerShell,

8// or a missing python must NEVER stall session start. Each field degrades to

High

Shell

Package source references shell execution.

dist/services/env-capabilities.jsView on unpkg · L6

dist/utils/optional-dep.jsView file

Lines 1-29javascript

1// Helper for lazy-loading optional dependencies.

2//

3// Heavy or feature-gated packages (cloud SDKs, AI SDKs, cloudflared) live in

4// `optionalDependencies` so a `npm install --no-optional comfyui-mcp` install

5// still yields a working server. The features that need those deps surface a

6// clear "install <pkg>" error instead of crashing on import.

7import { ModelError } from "./errors.js";

8const cache = new Map

dist/services/crash-log.jsView file

Lines 171-211javascript

171 let chosenMtime = -Infinity;

172 for (const p of candidates) {

173 try {

174 const m = statSync(p).mtimeMs;

175 if (m

scripts/codex-parity-smoke.mjsView file

Lines 1-32javascript

1// CODEX PARITY SMOKE — proves the Codex backend has FULL tool parity with Claude.

2//

3// Starts a codex-mode orchestrator (PANEL_AGENT_BACKEND=codex) on a test bridge

4// port + a headless mock-panel that implements the graph executors, then drives a

5// turn and asserts Codex actually invokes the panel_* tools over the loopback

6// HTTP MCP (not shell/HTTP flailing). Records every bridge command the agent

7// issued.

8//

9// node scripts/codex-parity-smoke.mjs

10//

11// Env: TEST_PORT (default 9141), SCENARIO_CAP_MS (default 180000 — Codex is slow).

dist/services/self-update.jsView file

Lines 1-41javascript

1// Self-update for the comfyui-mcp npm package.

2//

3// On MCP server START we check the npm registry; if a newer version is

4// published we auto-update the on-disk package, then tell the agent/user to

5// RECONNECT — the running Node process cannot hot-swap its own code, so the new

6// version only takes effect after the MCP client reconnects (/mcp) or the

7// orchestrator restarts.

8//

9// This mirrors the SAFETY model of the panel on-load ensure

10// (src/services/panel-installer.ts):

11// - NEVER mutate a dev install. `npm link` makes the package resolve to the

packs/qwen-image-edit-edit/install-windows.batView file

•path = packs/qwen-image-edit-edit/install-windows.bat kind = build_helper sizeBytes = 3162 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

packs/qwen-image-edit-edit/install-windows.batView on unpkg

dist/orchestrator/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = comfyui-mcp@0.23.0 matchedIdentity = npm:Y29tZnl1aS1tY3A:0.23.0 similarity = 0.983 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/orchestrator/index.jsView on unpkg

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/services/node-management.jsView file

1import { execFileSync } from "node:child_process"; L2: import { randomUUID } from "node:crypto";

High

Child Process

Package source references child process execution.

dist/services/node-management.jsView on unpkg · L1

dist/services/env-capabilities.jsView file

6// L7: // Every probe is best-effort and time-bounded: a hung ComfyUI, a slow PowerShell, L8: // or a missing python must NEVER stall session start. Each field degrades to

High

Shell

Package source references shell execution.

dist/services/env-capabilities.jsView on unpkg · L6

dist/utils/optional-dep.jsView file

13try { L14: const mod = (await import(spec)); L15: cache.set(spec, mod);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/utils/optional-dep.jsView on unpkg · L13

dist/services/crash-log.jsView file

191size > MAX_TAIL_BYTES L192: ? buf.subarray(size - MAX_TAIL_BYTES).toString("utf8") L193: : buf.toString("utf8");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/services/crash-log.jsView on unpkg · L191

scripts/codex-parity-smoke.mjsView file

12L13: import { spawn } from "node:child_process"; L14: import { fileURLToPath } from "node:url"; L15: import net from "node:net"; L16: import { WebSocket } from "ws"; L17: L18: const PORT = Number(process.env.TEST_PORT || 9141); L19: const MCP_ENTRY = fileURLToPath(new URL("../dist/index.js", import.meta.url));

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/codex-parity-smoke.mjsView on unpkg · L12

dist/services/self-update.jsView file

21import { existsSync, lstatSync, readFileSync, realpathSync } from "node:fs"; L22: import { execFile } from "node:child_process"; L23: import { dirname, join, resolve } from "node:path"; ... L37: try { L38: const res = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`, { L39: signal: AbortSignal.timeout(REGISTRY_TIMEOUT_MS), ... L43: return undefined; L44: const json = (await res.json()); L45: return typeof json.version === "string" ? json.version : undefined; ... L55: // so there is no shell-injection surface. L56: const isWin = process.platform === "win32"; L57: const cmd = isWin ? "npm.cmd" : "npm";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/services/self-update.jsView on unpkg · L21

packs/qwen-image-edit-edit/install-windows.batView file

•path = packs/qwen-image-edit-edit/install-windows.bat kind = build_helper sizeBytes = 3162 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

packs/qwen-image-edit-edit/install-windows.batView on unpkg

dist/orchestrator/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/orchestrator/index.jsView on unpkg

Findings

1 Critical5 High5 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/orchestrator/index.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/services/node-management.js

HighShelldist/services/env-capabilities.js

HighSame File Env Network Executionscripts/codex-parity-smoke.mjs

HighSandbox Evasion Gated Capabilitydist/services/self-update.js

MediumDynamic Requiredist/utils/optional-dep.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperpacks/qwen-image-edit-edit/install-windows.bat

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/services/crash-log.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

package.jsonView file

Lines 19-59json

19 ],

20 "scripts": {

21 "sync-agents": "node scripts/sync-agents.mjs",

22 "build": "tsc",

23 "dev": "tsx src/index.ts",

24 "dev:agent-poc": "tsx src/experimental/run.ts",

25 "start": "node dist/index.js",

26 "test": "vitest run --passWithNoTests",

27 "smoke": "npm run build && node scripts/smoke-install.mjs",

28 "test:watch": "vitest",

29 "test:integration": "cross-env COMFYUI_INTEGRATION=true vitest run",

30 "test:agent": "npm run build && node scripts/test-agent.mjs",

31 "lint": "tsc --noEmit",

32 "docs:gen": "cross-env COMFYUI_URL=http://127.0.0.1:8188 tsx scripts/gen-tool-docs.ts",

33 "packs:gen": "node scripts/gen-pack-installers.mjs",

34 "packs:validate": "node scripts/validate-manifests.mjs",

35 "packs:test": "bash scripts/test-packs.sh",

36 "packs:check-urls": "node scripts/check-model-urls.mjs",

37 "packs:check-models": "node scripts/check-pack-models.mjs",

38 "packs:verify-render": "node scripts/verify-render.mjs",

39 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L39

40 "generations:stats": "node scripts/generation-stats.mjs",

41 "release": "npm version patch && git push --follow-tags",

42 "release:minor": "npm version minor && git push --follow-tags",

43 "release:major": "npm version major && git push --follow-tags"

44 },

45 "dependencies": {

46 "@modelcontextprotocol/sdk": "^1.12.1",

47 "@stable-canvas/comfyui-client": "^1.5.9",

48 "better-sqlite3": "^12.6.2",

49 "dotenv": "^16.4.7",

50 "sharp": "^0.34.5",

51 "ws": "^8.21.0",

52 "yaml": "^2.9.0",

53 "zod": "^4.0.0"

54 },

55 "optionalDependencies": {

56 "@anthropic-ai/claude-agent-sdk": "^0.3.197",

57 "@openai/codex": "~0.141.0",

58 "@ai-sdk/anthropic": "^3.0.79",

59 "@ai-sdk/google": "^3.0.79",

dist/services/node-management.jsView file

Lines 1-21javascript

1import { execFileSync } from "node:child_process";

2import { randomUUID } from "node:crypto";

High

Child Process

Package source references child process execution.

dist/services/node-management.jsView on unpkg · L1

3import { existsSync } from "node:fs";

4import { basename, isAbsolute, join, relative, resolve } from "node:path";

dist/services/env-capabilities.jsView file

Lines 1-26javascript

1// Live ENVIRONMENT-CAPABILITIES probe for the panel orchestrator.

2//

3// Gathered ONCE at orchestrator startup (or lazily on the first tab) and CACHED,

4// then prepended as a compact one-line block to the panel agent's system prompt

5// so the agent is immediately aware of the machine — no probing, no guessing.

6//

7// Every probe is best-effort and time-bounded: a hung ComfyUI, a slow PowerShell,

8// or a missing python must NEVER stall session start. Each field degrades to

High

Shell

Package source references shell execution.

dist/services/env-capabilities.jsView on unpkg · L6

dist/utils/optional-dep.jsView file

Lines 1-29javascript

1// Helper for lazy-loading optional dependencies.

2//

3// Heavy or feature-gated packages (cloud SDKs, AI SDKs, cloudflared) live in

4// `optionalDependencies` so a `npm install --no-optional comfyui-mcp` install

5// still yields a working server. The features that need those deps surface a

6// clear "install <pkg>" error instead of crashing on import.

7import { ModelError } from "./errors.js";

8const cache = new Map

dist/services/crash-log.jsView file

Lines 171-211javascript

171 let chosenMtime = -Infinity;

172 for (const p of candidates) {

173 try {

174 const m = statSync(p).mtimeMs;

175 if (m

scripts/codex-parity-smoke.mjsView file

Lines 1-32javascript

1// CODEX PARITY SMOKE — proves the Codex backend has FULL tool parity with Claude.

2//

3// Starts a codex-mode orchestrator (PANEL_AGENT_BACKEND=codex) on a test bridge

4// port + a headless mock-panel that implements the graph executors, then drives a

5// turn and asserts Codex actually invokes the panel_* tools over the loopback

6// HTTP MCP (not shell/HTTP flailing). Records every bridge command the agent

7// issued.

8//

9// node scripts/codex-parity-smoke.mjs

10//

11// Env: TEST_PORT (default 9141), SCENARIO_CAP_MS (default 180000 — Codex is slow).

dist/services/self-update.jsView file

Lines 1-41javascript

1// Self-update for the comfyui-mcp npm package.

2//

3// On MCP server START we check the npm registry; if a newer version is

4// published we auto-update the on-disk package, then tell the agent/user to

5// RECONNECT — the running Node process cannot hot-swap its own code, so the new

6// version only takes effect after the MCP client reconnects (/mcp) or the

7// orchestrator restarts.

8//

9// This mirrors the SAFETY model of the panel on-load ensure

10// (src/services/panel-installer.ts):

11// - NEVER mutate a dev install. `npm link` makes the package resolve to the

packs/qwen-image-edit-edit/install-windows.batView file

•path = packs/qwen-image-edit-edit/install-windows.bat kind = build_helper sizeBytes = 3162 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

packs/qwen-image-edit-edit/install-windows.batView on unpkg

dist/orchestrator/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/orchestrator/index.jsView on unpkg