comfyui
Generates images, video, and audio using ComfyUI with REST/WebSocket API for advanced workflows and parameter management.
Install this skill
Security score
The comfyui skill was audited on May 17, 2026 and we found 41 security issues across 2 threat categories, including 5 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 108 | curl -s http://127.0.0.1:8188/system_stats 2>/dev/null && echo "server: running" |
Curl to non-GitHub URL
| 227 | | "what's in the queue?" | REST | `curl http://HOST:8188/queue` (local) or `--host https://cloud.comfy.org` | |
Curl to non-GitHub URL
| 228 | | "cancel that" | REST | `curl -X POST http://HOST:8188/interrupt` | |
Curl to non-GitHub URL
| 229 | | "free GPU memory" | REST | `curl -X POST http://HOST:8188/free` | |
Curl to non-GitHub URL
| 406 | curl -s http://127.0.0.1:8188/system_stats # health check |
Curl to non-GitHub URL
| 504 | curl -X POST "http://127.0.0.1:8188/upload/image" \ |
Curl to non-GitHub URL
| 509 | curl -X POST "https://cloud.comfy.org/api/upload/image" \ |
Curl to non-GitHub URL
| 539 | curl -s http://127.0.0.1:8188/queue | python3 -m json.tool |
Curl to non-GitHub URL
| 540 | curl -X POST http://127.0.0.1:8188/queue -d '{"clear": true}' # cancel pending |
Curl to non-GitHub URL
| 541 | curl -X POST http://127.0.0.1:8188/interrupt # cancel running |
Curl to non-GitHub URL
| 542 | curl -X POST http://127.0.0.1:8188/free \ |
Curl to non-GitHub URL
| 559 | `curl http://127.0.0.1:8188/system_stats`. |
Curl to non-GitHub URL
| 606 | - [ ] `curl http://HOST:PORT/system_stats` returns JSON |
External URL reference
| 108 | curl -s http://127.0.0.1:8188/system_stats 2>/dev/null && echo "server: running" |
External URL reference
| 152 | # Local (defaults to http://127.0.0.1:8188) |
External URL reference
| 163 | --host https://cloud.comfy.org \ |
External URL reference
| 227 | | "what's in the queue?" | REST | `curl http://HOST:8188/queue` (local) or `--host https://cloud.comfy.org` | |
External URL reference
| 228 | | "cancel that" | REST | `curl -X POST http://HOST:8188/interrupt` | |
External URL reference
| 229 | | "free GPU memory" | REST | `curl -X POST http://HOST:8188/free` | |
External URL reference
| 323 | 1. Sign up at https://comfy.org/cloud |
External URL reference
| 324 | 2. Generate an API key at https://platform.comfy.org/login |
External URL reference
| 334 | --host https://cloud.comfy.org \ |
External URL reference
| 338 | **Pricing:** https://www.comfy.org/cloud/pricing |
External URL reference
| 350 | - **Windows (NVIDIA):** https://download.comfy.org/windows/nsis/x64 |
External URL reference
| 351 | - **macOS (Apple Silicon):** https://comfy.org |
External URL reference
| 406 | curl -s http://127.0.0.1:8188/system_stats # health check |
External URL reference
| 420 | pip install torch torchvision torchaudio --extra-index-url https://download.pytorch.org/whl/cu130 |
External URL reference
| 432 | --url "https://huggingface.co/stabilityai/stable-diffusion-xl-base-1.0/resolve/main/sd_xl_base_1.0.safetensors" \ |
External URL reference
| 437 | --url "https://huggingface.co/stable-diffusion-v1-5/stable-diffusion-v1-5/resolve/main/v1-5-pruned-emaonly.safetensors" \ |
External URL reference
| 442 | --url "https://huggingface.co/Comfy-Org/flux1-dev/resolve/main/flux1-dev-fp8.safetensors" \ |
External URL reference
| 447 | --url "https://civitai.com/api/download/models/128713" \ |
External URL reference
| 504 | curl -X POST "http://127.0.0.1:8188/upload/image" \ |
External URL reference
| 509 | curl -X POST "https://cloud.comfy.org/api/upload/image" \ |
External URL reference
| 516 | - **Base URL:** `https://cloud.comfy.org` |
External URL reference
| 539 | curl -s http://127.0.0.1:8188/queue | python3 -m json.tool |
External URL reference
| 540 | curl -X POST http://127.0.0.1:8188/queue -d '{"clear": true}' # cancel pending |
External URL reference
| 541 | curl -X POST http://127.0.0.1:8188/interrupt # cancel running |
External URL reference
| 542 | curl -X POST http://127.0.0.1:8188/free \ |
External URL reference
| 547 | python3 scripts/fetch_logs.py --tail-queue --host https://cloud.comfy.org |
External URL reference
| 559 | `curl http://127.0.0.1:8188/system_stats`. |
External URL reference
| 606 | - [ ] `curl http://HOST:PORT/system_stats` returns JSON |