Hi Comfy Org team,
My plugin comfyui-zyd232-nodes is currently stuck on version 0.1.1. Newer versions >=0.2.0 are stuck in NodeVersionStatusPending because version 0.2.0 was flagged as NodeVersionStatusFlagged.
Reason for Flag:
The YARA scanner triggered a false positive on nodes/LLMGenerator.py for python_network_operations (Exfiltration Over C2 Channel).
Explanation:
This node (LLMGenerator) is designed to connect to LLM APIs (OpenAI compatible endpoints). The requests.post and requests.get with Authorization: Bearer {api_key} are standard and necessary operations to fetch models and send chat completions to the user's chosen LLM provider. There is no data exfiltration or malicious credential theft.
Could you please manually review and unflag/approve the newest version for my registry?
Or could you please let me know how I should modify my code to comply with the registry's security standards?
Thank you!
Hi Comfy Org team,
My plugin
comfyui-zyd232-nodesis currently stuck on version0.1.1. Newer versions>=0.2.0are stuck inNodeVersionStatusPendingbecause version0.2.0was flagged asNodeVersionStatusFlagged.Reason for Flag:
The YARA scanner triggered a false positive on
nodes/LLMGenerator.pyforpython_network_operations(Exfiltration Over C2 Channel).Explanation:
This node (
LLMGenerator) is designed to connect to LLM APIs (OpenAI compatible endpoints). Therequests.postandrequests.getwithAuthorization: Bearer {api_key}are standard and necessary operations to fetch models and send chat completions to the user's chosen LLM provider. There is no data exfiltration or malicious credential theft.Could you please manually review and unflag/approve the newest version for my registry?
Or could you please let me know how I should modify my code to comply with the registry's security standards?
Thank you!