The outcome

Reproduce a shared workflow while controlling supply-chain and model risks.

Step by step

A workflow you can repeat.

  1. 01

    Inspect the workflow image or JSON, list missing nodes and models, and identify its original source and license.

  2. 02

    Create a snapshot or isolated installation before using ComfyUI-Manager to locate missing packages.

  3. 03

    Review each custom-node repository, maintainer, recent commits, install scripts, permissions, and open security reports.

  4. 04

    Install the minimum dependencies, restart, and run with non-sensitive test inputs while watching console and network behavior.

  5. 05

    Save the working snapshot, exact versions, model hashes, and replacement plan for abandoned custom nodes.

Working standard

What good use looks like.

  • Treat custom nodes as executable code.
  • Snapshot before installation.
  • Never load untrusted workflows with secrets available.

Official references

Check the current product documentation.