LLM Agent Framework in ComfyUI includes MCP sever, Omost,GPT-sovits, ChatTTS,GOT-OCR2.0, and FLUX prompt nodes,access to Feishu,discord,and adapts to all llms with similar openai / aisuite interfaces, such as o1,ollama, gemini, grok, qwen, GLM, deepseek, kimi,doubao. Adapted to local llms, vlm, gguf such as llama-3.3 Janus-Pro, Linkage graphRAG
Drift inferred · capture-to-capture
- HIGH code analysis flagged hidden prompt content ×2, dynamic code execution ×2 in heshengtao/comfyui_LLM_party
transport http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 4d27996 · analyzer v17 · 1h ago
skills & prompt files 2
- ⚠ hidden: readme: hidden-unicodeheshengtao-comfyui_LLM_party-4d27996/README.md:30
C‹U+200C›‹U+200C›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+200F›‹U+200B›‹U+FEFF›‹U+200D›‹U+200E›‹U+200B›‹U+FEFF›‹U+200E›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+200F›‹U+200B›‹U+FEFF - ⚠ hidden: readme: hidden-unicodeheshengtao-comfyui_LLM_party-4d27996/file/README.md:31
C‹U+200C›‹U+200C›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+200F›‹U+200B›‹U+FEFF›‹U+200D›‹U+200E›‹U+200B›‹U+FEFF›‹U+200E›‹U+FEFF›‹U+200B›‹U+FEFF›‹U+200E›‹U+200F›‹U+200B›‹U+FEFF
danger signals2
- dynamic code executioneval()/exec()heshengtao-comfyui_LLM_party-4d27996/lib_omost/canvas.py:241
exec(code_content, {}, local_vars) - dynamic code executioneval()/exec()heshengtao-comfyui_LLM_party-4d27996/tools/interpreter.py:16
exec(code_str, local_vars, local_vars)
evidence-backed
findings quoted directly from the published source artifact — not inferred
filesystem 45
- fs heshengtao-comfyui_LLM_party-4d27996/__init__.py :4
import shutil - fs heshengtao-comfyui_LLM_party-4d27996/api.py :81
with open(WF_path, "r", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/config.py :4
import shutil - fs heshengtao-comfyui_LLM_party-4d27996/config_update.py :49
with open(config_path, 'w') as configfile: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/dall_e.py :47
with open(img_path, 'wb') as f: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/discord_bot.py :46
with open(run_bot_code, "w", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/discord_monitor.py :15
os.remove(os.path.join(discord_temp_dir, file)) - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_download.py :64
with open(file_path, "wb") as file: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_download_img.py :80
with open(file_path, "wb") as file: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_send_msg.py :64
form = {"image_type": "message", "image": (open(image_path, "rb"))} - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/file_control_safe.py :5
import shutil - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/file_online_storage.py :116
with open(self.file_path, "rb") as file: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/fish_audio.py :56
with open(audio_path, "rb") as audio_file: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/folder_clear.py :2
import shutil - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/gpt_sovits.py :109
with open(full_audio_path, "wb") as f: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/html2img.py :44
img = Image.open(image_path) - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/json_parser.py :17
with open(file_path, "r", encoding="utf-8") as data: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/load_memo.py :46
with open(self.prompt_path, "w", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/mcp_cli.py :11
import shutil - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/md2html.py :167
with open(path, "w", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/movie_editor.py :66
img = Image.open(image_path) - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/open_web.py :27
success = webbrowser.open(path_or_url) - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/save_persona.py :26
with open(os.path.join(persona_path, persona_name + ".txt"), "w", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/srt2txt.py :19
with open(file_path, 'r', encoding='utf-8') as f: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/svg2img.py :44
with open(html_file, 'w', encoding='utf-8') as file: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/url2image.py :65
with open(img_path, 'wb') as f: - fs heshengtao-comfyui_LLM_party-4d27996/custom_tool/whisper_party.py :175
audio_file = open(audio_path, "rb") - fs heshengtao-comfyui_LLM_party-4d27996/fast_api.py :106
with open(WF_path, "r", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/fast_api_v2.py :116
with open(WF_path, "r", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/install.py :5
import shutil - fs heshengtao-comfyui_LLM_party-4d27996/janus/utils/io.py :76
pil_img = PIL.Image.open(io.BytesIO(image_bytes)) - fs heshengtao-comfyui_LLM_party-4d27996/llm.py :1441
with open(self.prompt_path, "w", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/tools/KG.py :363
with open(KG_path, "r", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/tools/KG_csv.py :190
with open(KG_path, "r", encoding="utf8") as fin: - fs heshengtao-comfyui_LLM_party-4d27996/tools/clear_file.py :3
import shutil - fs heshengtao-comfyui_LLM_party-4d27996/tools/dialog.py :24
with open(self.prompt_path, "w", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/tools/end_work.py :69
with open(os.path.join(self.output_dir, file), "w", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/tools/feishu.py :16
form = {"image_type": "message", "image": (open(path, "rb"))} # 需要替换具体的path - fs heshengtao-comfyui_LLM_party-4d27996/tools/load_file.py :29
with open(path, "r", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/tools/load_persona.py :39
with open(per_path, "r", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/tools/story.py :64
with open(story_path, "r", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/tools/text_iterator.py :117
with open(file_path, mode, encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/tools/tts.py :3
import shutil - fs heshengtao-comfyui_LLM_party-4d27996/tools/workflow.py :92
with open(WF_path, "r", encoding="utf-8") as f: - fs heshengtao-comfyui_LLM_party-4d27996/tools/workflow_V2.py :92
with open(WF_path, "r", encoding="utf-8") as f:
shell / exec 7
- shell heshengtao-comfyui_LLM_party-4d27996/__init__.py :5
import subprocess - shell heshengtao-comfyui_LLM_party-4d27996/config_update.py :9
import subprocess - shell heshengtao-comfyui_LLM_party-4d27996/custom_tool/discord_bot.py :4
import subprocess - shell heshengtao-comfyui_LLM_party-4d27996/fast_api_v2.py :36
import subprocess - shell heshengtao-comfyui_LLM_party-4d27996/install.py :6
import subprocess - shell heshengtao-comfyui_LLM_party-4d27996/tools/workflow.py :9
import subprocess - shell heshengtao-comfyui_LLM_party-4d27996/tools/workflow_V2.py :9
import subprocess
network 38
- net heshengtao-comfyui_LLM_party-4d27996/api.py :5
import urllib.parse - net heshengtao-comfyui_LLM_party-4d27996/config_update.py :7
from aiohttp import web - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/WeChat_Official.py :2
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/amap.py :3
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/amap_decode.py :5
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/amap_encode.py :3
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/dall_e.py :2
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_download.py :5
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_download_img.py :5
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_get_history_msg.py :10
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/feishu_send_msg.py :5
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/file_online_delete.py :6
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/file_online_storage.py :6
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/gpt_sovits.py :4
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/image_hosting.py :2
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/miniparty.py :8
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/openai_ebd.py :8
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/searxng.py :4
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/url2image.py :4
import requests - net heshengtao-comfyui_LLM_party-4d27996/custom_tool/whisper_party.py :12
import requests - net heshengtao-comfyui_LLM_party-4d27996/fast_api.py :8
import urllib.parse - net heshengtao-comfyui_LLM_party-4d27996/fast_api_v2.py :11
import urllib.parse - net heshengtao-comfyui_LLM_party-4d27996/install.py :10
from requests import get - net heshengtao-comfyui_LLM_party-4d27996/llm.py :1
import aiohttp - net heshengtao-comfyui_LLM_party-4d27996/tools/api_tool.py :3
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/check_web.py :7
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/clear_model.py :4
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/dingding.py :3
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/feishu.py :4
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/get_weather.py :3
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/git_tool.py :4
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/keyword.py :4
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/load_file.py :13
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/search_web.py :4
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/tts.py :8
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/wechat.py :3
import requests - net heshengtao-comfyui_LLM_party-4d27996/tools/workflow.py :8
import socket - net heshengtao-comfyui_LLM_party-4d27996/tools/workflow_V2.py :8
import socket
secrets 8
- secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/Moderation.py :96
openai.api_key = os.environ.get("OPENAI_API_KEY") - secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/SQL.py :93
openai.api_key = os.environ.get("OPENAI_API_KEY") - secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/dall_e.py :214
openai.api_key = os.environ.get("OPENAI_API_KEY") - secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/openai_ebd.py :109
openai.api_key = os.environ.get("OPENAI_API_KEY") - secrets heshengtao-comfyui_LLM_party-4d27996/custom_tool/whisper_party.py :145
openai.api_key = os.environ.get("OPENAI_API_KEY") - secrets heshengtao-comfyui_LLM_party-4d27996/llm.py :860
os.environ['AWS_ACCESS_KEY'] = aws_access_key_id - secrets heshengtao-comfyui_LLM_party-4d27996/tools/check_web.py :180
openai.api_key = os.environ.get("OPENAI_API_KEY") - secrets heshengtao-comfyui_LLM_party-4d27996/tools/tts.py :65
openai.api_key = os.environ.get("OPENAI_API_KEY")
database 3
- db heshengtao-comfyui_LLM_party-4d27996/custom_tool/SQL.py :7
from sqlalchemy import create_engine - db heshengtao-comfyui_LLM_party-4d27996/custom_tool/load_SQL.py :5
from sqlalchemy import create_engine, Column, Integer, String, Text - db heshengtao-comfyui_LLM_party-4d27996/custom_tool/load_redis.py :4
import redis
declared dependencies 60
- beautifulsoup4@*
- docx2txt@*
- langchain@*
- langchain-community@*
- langchain-text-splitters@*
- openai@>=1.57.4
- openpyxl@*
- pandas@*
- pytz@*
- requests@*
- xlrd@*
- faiss-cpu@*
- websocket-client@*
- streamlit@*
- virtualenv@*
- tiktoken@*
- transformers@*
- transformers-stream-generator@*
- optimum@*
- pdfplumber@*
- wikipedia@*
- arxiv@*
- bitsandbytes@*
- accelerate@*
- fastapi@*
- py-cpuinfo@*
- diskcache@*
- requests-toolbelt@*
- tabulate@*
- charset-normalizer@*
- tenacity@*
- cpm-kernels@*
- pydub@*
- keyboard@*
- sounddevice@*
- neo4j@*
- soundfile@*
- langchain-openai@*
- sentence-transformers@*
- uvicorn@*
- google-generativeai@*
- llama-index@*
- html2image@*
- markdown@*
- selenium@*
- librosa@*
- ffmpeg-python@*
- moviepy@*
- html5lib@*
- easyocr@*
- feedparser@*
- psutil@*
- verovio@*
- mdtex2html@*
- markdownify@*
- srt@*
- peft@*
- scipy@>=1.15.2
- json-repair@>=0.44.0
- redis@>=5.3.0