Security audit
@openclaw/comfy-provider
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent ComfyUI media-generation provider that uses configured workflows, API keys, and network endpoints for its stated purpose.
Install only if you intend OpenClaw to run ComfyUI workflows. Review the configured baseUrl, workflowPath, headers, API key source, and allowPrivateNetwork setting because prompts, workflow contents, and input media may be sent to the selected local or cloud ComfyUI endpoint.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.