Comfy-Org / Comfy-Org/comfy-cli

[Registry] My pugin stuck on Pending due to LLM networking false positive in v0.2.0

Open
#507 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
968
Forks
151
Avg merge
1d 9h
Merged PRs (30d)
77

Description

Hi Comfy Org team,

My plugin `comfyui-zyd232-nodes` is currently stuck on version `0.1.1`. Newer versions `>=0.2.0` are stuck in `NodeVersionStatusPending` because version `0.2.0` was flagged as `NodeVersionStatusFlagged`.

**Reason for Flag:**
The YARA scanner triggered a false positive on `nodes/LLMGenerator.py` for `python_network_operations` (Exfiltration Over C2 Channel).

**Explanation:**
This node (`LLMGenerator`) is designed to connect to LLM APIs (OpenAI compatible endpoints). The `requests.post` and `requests.get` with `Authorization: Bearer {api_key}` are standard and necessary operations to fetch models and send chat completions to the user's chosen LLM provider. There is no data exfiltration or malicious credential theft.

Could you please manually review and unflag/approve the newest version for my registry?
Or could you please let me know how I should modify my code to comply with the registry's security standards?

* **Node ID:** comfyui-zyd232-nodes
* **Registry Link:** https://registry.comfy.org/zh/publishers/zyd232/nodes/comfyui-zyd232-nodes

Thank you!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.