search

Try

report

Is this ComfyUI node safe to install?

The ComfyUI registry scans every custom node version it publishes and flags or bans the ones that look risky. The reasons are there, but as raw scanner output. This checker reads them for you: each finding in plain English, ranked by severity, with the flagged line of code picked out.

1Search for a node, or pick one to try.
2The verdict says what installing the latest version means today.
3Open a finding to see the code it's about and what it could mean.

How it works

Where do the results come from?: Straight from the ComfyUI registry. Your browser asks its public API directly, so your searches never pass through this site, and nothing is stored anywhere but your own browser (the recent list).
What do flagged and banned mean?: The registry scans each version of a node when it's published. Flagged means the scan found patterns worth a look; the version is still installable. Banned means the registry pulled it. Pending means the scan hasn't finished yet.
Does a finding mean a node is malicious?: No. Findings are automated pattern matches (YARA rules and similar), and plenty of honest code trips them: reading environment variables, running ffmpeg, downloading models. Each finding says what the pattern could mean and shows the code, so you can judge. A low confidence score usually means a false positive.
How are findings ranked?: By the scanner's own severity, from critical down to info. Where a finding carries a numeric YARA severity (5 to 1), that's used; otherwise its label.
Why does the verdict only talk about the latest version?: Because that's what comfy node install gives you today. Older banned or flagged versions are still mentioned, since a history of them is worth knowing about.
Who made this?: Nynxz. It isn't affiliated with Comfy Org.