ComfyUI with a threat model and a chatbot

What it does

ComfyUI-OpenClaw embeds inside ComfyUI to add an admin dashboard, a secure HTTP API, and LLM-assisted helper nodes. It exposes automation primitives—webhooks, schedules, approvals, presets, and model management—while routing chat commands from eight platforms through an optional sidecar process. The goal is to turn a local image-generation workspace into a remotely operable, gated service.

The interesting bit

Most ComfyUI extensions optimize for convenience; this one optimizes for distrust. It treats every automation surface as a potential attack vector, layering RBAC, CSRF tokens, HMAC signing, SSRF guards, audit logging, and replay protection onto a tool usually run on a trusted laptop. The control plane is deliberately split so high-risk admin functions live on an externalized surface while the embedded UI stays inside the familiar Comfy sidebar.

Key highlights

• Embeds directly into ComfyUI’s existing web server, adding managed routes, a sidebar panel, and a mobile-friendly remote admin console at /openclaw/admin.
• Ships LLM-assisted nodes—planner, refiner, vision, and batch variants—for workflow generation and refinement.
• Exposes a secure-by-default HTTP API for webhooks, triggers, schedules, approvals, and rewrite recipes.
• Bridges to eight chat platforms via an optional connector sidecar, preserving threads, topics, and workspace context.
• Carries an explicit threat model, supply-chain hardening checks, and “fail-closed” defaults for public-facing deployments.

Caveats

• Connector packaging is still being extracted and carries documented “split-package seams” per the project’s own architecture records.
• Because it runs inside ComfyUI’s single Python process, its security model relies on hardening controls rather than physical process isolation.

Verdict

Worth a look if you are trying to expose ComfyUI to a team, a Discord server, or scheduled automation without treating security as an afterthought. Skip it if you just want a quick, ungated webhook for personal use—the guardrails will get in the way.