Security audit
@openclaw/comfy-provider
Security checks for vulnerabilities and agentic risk
Overview
This plugin coherently provides ComfyUI media-generation support and its credential, file, and network access are disclosed and purpose-aligned.
Install only if you intend OpenClaw to send prompts, optional reference images, workflow data, and API credentials to your configured ComfyUI endpoint. Prefer the default local URL or the documented Comfy Cloud endpoint, and treat custom headers/baseUrl settings as sensitive configuration.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.