Comfy-Org / Comfy-Org/comfy-cli
[Registry] My pugin stuck on Pending due to LLM networking false positive in v0.2.0
- Dominant language
- Python
- Stars
- 968
- Forks
- 151
- Avg merge
- 1d 9h
- Merged PRs (30d)
- 77
Description
Hi Comfy Org team,
My plugin `comfyui-zyd232-nodes` is currently stuck on version `0.1.1`. Newer versions `>=0.2.0` are stuck in `NodeVersionStatusPending` because version `0.2.0` was flagged as `NodeVersionStatusFlagged`.
**Reason for Flag:**
The YARA scanner triggered a false positive on `nodes/LLMGenerator.py` for `python_network_operations` (Exfiltration Over C2 Channel).
**Explanation:**
This node (`LLMGenerator`) is designed to connect to LLM APIs (OpenAI compatible endpoints). The `requests.post` and `requests.get` with `Authorization: Bearer {api_key}` are standard and necessary operations to fetch models and send chat completions to the user's chosen LLM provider. There is no data exfiltration or malicious credential theft.
Could you please manually review and unflag/approve the newest version for my registry?
Or could you please let me know how I should modify my code to comply with the registry's security standards?
* **Node ID:** comfyui-zyd232-nodes
* **Registry Link:** https://registry.comfy.org/zh/publishers/zyd232/nodes/comfyui-zyd232-nodes
Thank you!
Contributor guide
Assessment
This issue has not been assessed yet.