github analyzed 4d27996

heshengtao/comfyui_LLM_party

github

LLM Agent Framework in ComfyUI includes MCP sever, Omost,GPT-sovits, ChatTTS,GOT-OCR2.0, and FLUX prompt nodes,access to Feishu,discord,and adapts to all llms with similar openai / aisuite interfaces, such as o1,ollama, gemini, grok, qwen, GLM, deepseek, kimi,doubao. Adapted to local llms, vlm, gguf such as llama-3.3 Janus-Pro, Linkage graphRAG

maintainer
heshengtao
license
AGPL-3.0
first seen
2026-06-01
last seen
2026-06-04
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged hidden prompt content ×2, dynamic code execution ×2 in heshengtao/comfyui_LLM_party
capabilities0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signalsgithub-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 4d27996 · analyzer v17 · 1h ago

skills & prompt files 2

  • ⚠ hidden: readme: hidden-unicodeheshengtao-comfyui_LLM_party-4d27996/README.md:30C‹U+200C›‹U+200C›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+200F›‹U+200B›‹U+FEFF›‹U+200D›‹U+200E›‹U+200B›‹U+FEFF›‹U+200E›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+200F›‹U+200B›‹U+FEFF
  • ⚠ hidden: readme: hidden-unicodeheshengtao-comfyui_LLM_party-4d27996/file/README.md:31C‹U+200C›‹U+200C›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+200F›‹U+200B›‹U+FEFF›‹U+200D›‹U+200E›‹U+200B›‹U+FEFF›‹U+200E›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+200F›‹U+200B›‹U+FEFF

danger signals2

code evidencevv0.6.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 45

  • fs heshengtao-comfyui_LLM_party-4d27996/__init__.py :4 import shutil
  • fs heshengtao-comfyui_LLM_party-4d27996/api.py :81 with open(WF_path, "r", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/config.py :4 import shutil
  • fs heshengtao-comfyui_LLM_party-4d27996/config_update.py :49 with open(config_path, 'w') as configfile:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/dall_e.py :47 with open(img_path, 'wb') as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/discord_bot.py :46 with open(run_bot_code, "w", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/discord_monitor.py :15 os.remove(os.path.join(discord_temp_dir, file))
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_download.py :64 with open(file_path, "wb") as file:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_download_img.py :80 with open(file_path, "wb") as file:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_send_msg.py :64 form = {"image_type": "message", "image": (open(image_path, "rb"))}
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/file_control_safe.py :5 import shutil
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/file_online_storage.py :116 with open(self.file_path, "rb") as file:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/fish_audio.py :56 with open(audio_path, "rb") as audio_file:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/folder_clear.py :2 import shutil
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/gpt_sovits.py :109 with open(full_audio_path, "wb") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/html2img.py :44 img = Image.open(image_path)
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/json_parser.py :17 with open(file_path, "r", encoding="utf-8") as data:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/load_memo.py :46 with open(self.prompt_path, "w", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/mcp_cli.py :11 import shutil
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/md2html.py :167 with open(path, "w", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/movie_editor.py :66 img = Image.open(image_path)
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/open_web.py :27 success = webbrowser.open(path_or_url)
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/save_persona.py :26 with open(os.path.join(persona_path, persona_name + ".txt"), "w", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/srt2txt.py :19 with open(file_path, 'r', encoding='utf-8') as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/svg2img.py :44 with open(html_file, 'w', encoding='utf-8') as file:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/url2image.py :65 with open(img_path, 'wb') as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/whisper_party.py :175 audio_file = open(audio_path, "rb")
  • fs heshengtao-comfyui_LLM_party-4d27996/fast_api.py :106 with open(WF_path, "r", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/fast_api_v2.py :116 with open(WF_path, "r", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/install.py :5 import shutil
  • fs heshengtao-comfyui_LLM_party-4d27996/janus/utils/io.py :76 pil_img = PIL.Image.open(io.BytesIO(image_bytes))
  • fs heshengtao-comfyui_LLM_party-4d27996/llm.py :1441 with open(self.prompt_path, "w", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/KG.py :363 with open(KG_path, "r", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/KG_csv.py :190 with open(KG_path, "r", encoding="utf8") as fin:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/clear_file.py :3 import shutil
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/dialog.py :24 with open(self.prompt_path, "w", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/end_work.py :69 with open(os.path.join(self.output_dir, file), "w", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/feishu.py :16 form = {"image_type": "message", "image": (open(path, "rb"))} # 需要替换具体的path
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/load_file.py :29 with open(path, "r", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/load_persona.py :39 with open(per_path, "r", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/story.py :64 with open(story_path, "r", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/text_iterator.py :117 with open(file_path, mode, encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/tts.py :3 import shutil
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/workflow.py :92 with open(WF_path, "r", encoding="utf-8") as f:
  • fs heshengtao-comfyui_LLM_party-4d27996/tools/workflow_V2.py :92 with open(WF_path, "r", encoding="utf-8") as f:

shell / exec 7

  • shell heshengtao-comfyui_LLM_party-4d27996/__init__.py :5 import subprocess
  • shell heshengtao-comfyui_LLM_party-4d27996/config_update.py :9 import subprocess
  • shell heshengtao-comfyui_LLM_party-4d27996/custom_tool/discord_bot.py :4 import subprocess
  • shell heshengtao-comfyui_LLM_party-4d27996/fast_api_v2.py :36 import subprocess
  • shell heshengtao-comfyui_LLM_party-4d27996/install.py :6 import subprocess
  • shell heshengtao-comfyui_LLM_party-4d27996/tools/workflow.py :9 import subprocess
  • shell heshengtao-comfyui_LLM_party-4d27996/tools/workflow_V2.py :9 import subprocess

network 38

  • net heshengtao-comfyui_LLM_party-4d27996/api.py :5 import urllib.parse
  • net heshengtao-comfyui_LLM_party-4d27996/config_update.py :7 from aiohttp import web
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/WeChat_Official.py :2 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/amap.py :3 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/amap_decode.py :5 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/amap_encode.py :3 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/dall_e.py :2 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_download.py :5 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_download_img.py :5 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_get_history_msg.py :10 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_send_msg.py :5 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/file_online_delete.py :6 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/file_online_storage.py :6 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/gpt_sovits.py :4 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/image_hosting.py :2 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/miniparty.py :8 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/openai_ebd.py :8 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/searxng.py :4 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/url2image.py :4 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/custom_tool/whisper_party.py :12 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/fast_api.py :8 import urllib.parse
  • net heshengtao-comfyui_LLM_party-4d27996/fast_api_v2.py :11 import urllib.parse
  • net heshengtao-comfyui_LLM_party-4d27996/install.py :10 from requests import get
  • net heshengtao-comfyui_LLM_party-4d27996/llm.py :1 import aiohttp
  • net heshengtao-comfyui_LLM_party-4d27996/tools/api_tool.py :3 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/check_web.py :7 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/clear_model.py :4 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/dingding.py :3 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/feishu.py :4 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/get_weather.py :3 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/git_tool.py :4 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/keyword.py :4 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/load_file.py :13 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/search_web.py :4 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/tts.py :8 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/wechat.py :3 import requests
  • net heshengtao-comfyui_LLM_party-4d27996/tools/workflow.py :8 import socket
  • net heshengtao-comfyui_LLM_party-4d27996/tools/workflow_V2.py :8 import socket

secrets 8

  • secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/Moderation.py :96 openai.api_key = os.environ.get("OPENAI_API_KEY")
  • secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/SQL.py :93 openai.api_key = os.environ.get("OPENAI_API_KEY")
  • secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/dall_e.py :214 openai.api_key = os.environ.get("OPENAI_API_KEY")
  • secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/openai_ebd.py :109 openai.api_key = os.environ.get("OPENAI_API_KEY")
  • secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/whisper_party.py :145 openai.api_key = os.environ.get("OPENAI_API_KEY")
  • secrets heshengtao-comfyui_LLM_party-4d27996/llm.py :860 os.environ['AWS_ACCESS_KEY'] = aws_access_key_id
  • secrets heshengtao-comfyui_LLM_party-4d27996/tools/check_web.py :180 openai.api_key = os.environ.get("OPENAI_API_KEY")
  • secrets heshengtao-comfyui_LLM_party-4d27996/tools/tts.py :65 openai.api_key = os.environ.get("OPENAI_API_KEY")

database 3

  • db heshengtao-comfyui_LLM_party-4d27996/custom_tool/SQL.py :7 from sqlalchemy import create_engine
  • db heshengtao-comfyui_LLM_party-4d27996/custom_tool/load_SQL.py :5 from sqlalchemy import create_engine, Column, Integer, String, Text
  • db heshengtao-comfyui_LLM_party-4d27996/custom_tool/load_redis.py :4 import redis

declared dependencies 60

  • beautifulsoup4@*
  • docx2txt@*
  • langchain@*
  • langchain-community@*
  • langchain-text-splitters@*
  • openai@>=1.57.4
  • openpyxl@*
  • pandas@*
  • pytz@*
  • requests@*
  • xlrd@*
  • faiss-cpu@*
  • websocket-client@*
  • streamlit@*
  • virtualenv@*
  • tiktoken@*
  • transformers@*
  • transformers-stream-generator@*
  • optimum@*
  • pdfplumber@*
  • wikipedia@*
  • arxiv@*
  • bitsandbytes@*
  • accelerate@*
  • fastapi@*
  • py-cpuinfo@*
  • diskcache@*
  • requests-toolbelt@*
  • tabulate@*
  • charset-normalizer@*
  • tenacity@*
  • cpm-kernels@*
  • pydub@*
  • keyboard@*
  • sounddevice@*
  • neo4j@*
  • soundfile@*
  • langchain-openai@*
  • sentence-transformers@*
  • uvicorn@*
  • google-generativeai@*
  • llama-index@*
  • html2image@*
  • markdown@*
  • selenium@*
  • librosa@*
  • ffmpeg-python@*
  • moviepy@*
  • html5lib@*
  • easyocr@*
  • feedparser@*
  • psutil@*
  • verovio@*
  • mdtex2html@*
  • markdownify@*
  • srt@*
  • peft@*
  • scipy@>=1.15.2
  • json-repair@>=0.44.0
  • redis@>=5.3.0