01Path Sanitizer validates all file and URL paths, blocking traversal attacks and disallowing absolute paths.
02Selective API surface exposes only safe ComfyUI endpoints, while critical security risks are never proxied.
03Structured JSON audit logging with automatic redaction of sensitive fields (tokens, passwords).
040 GitHub stars
05Workflow Inspector flags dangerous nodes and patterns (e.g., `eval`, `exec`) in submitted workflows.
06Token-bucket rate limiting prevents runaway loops and denial-of-service attempts per tool category.