← back to comfyui

Skill Scanner · comfyui

independent scanner by Cisco AI Defense · skill by aniruddhaadak80 · how it works ↗

FAILmax severity: CRITICAL

Undeclared network usage; Dangerous data flow in command pipeline; Outbound network request primitives that can transmit data externally; +2 more

scanned 2026-08-22

Findings (8)

MEDIUMunauthorized_tool_use

Undeclared network usage

C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\36073\SKILL.md

HIGHcommand_injection

Dangerous data flow in command pipeline

SKILL.md:3

LOWcommand_injection

Dangerous data flow in command pipeline

references\rest-api.md:3

MEDIUMdata_exfiltration

Outbound network request primitives that can transmit data externally

scripts\_common.py:577

MEDIUMdata_exfiltration

Outbound network request primitives that can transmit data externally

scripts\_common.py:597

CRITICALdata_exfiltration

Direct socket connection to external server

scripts\run_workflow.py:274

CRITICALdata_exfiltration

Direct socket connection to external server

scripts\ws_monitor.py:158

HIGHresource_abuse

Infinite loop without clear exit condition

scripts\ws_monitor.py:163

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete