Add ComfyUI-Workflow-Studio

[ketle-man]

Summary

• Add ComfyUI-Workflow-Studio to the custom node list

Custom Node Info

• Repository: https://github.com/ketle-man/ComfyUI-Workflow-Studio
• Author: ketle-man
• Install type: git-clone

Description

Workflow management and generation UI plugin for ComfyUI.

• Workflow Tab: Browse, search, and organize workflows with thumbnail/card/table views, metadata analysis, and AI-generated summaries
• GenerateUI Tab: Auto-generated parameter editing UI with one-click generation, seed control, and Raw JSON editor with syntax highlighting
• Prompt Tab: AI chat assistant powered by Ollama with JA/EN/ZH translation and prompt presets
• Settings Tab: Configurable workflows directory, Ollama/Eagle integration, multi-language UI (English/Japanese/Chinese)

Screenshots

Workflow Tab	GenerateUI Tab

Prompt Tab	Settings Tab

[ltdrdata]

Access to arbitrary paths must not be allowed.

https://github.com/ketle-man/ComfyUI-Workflow-Studio/blob/fc82c0fed0d90d9e3337058b120fee0c9ffbd076/py/services/workflow_service.py#L139

https://github.com/ketle-man/ComfyUI-Workflow-Studio/blob/fc82c0fed0d90d9e3337058b120fee0c9ffbd076/py/services/workflow_service.py#L161

[ketle-man]

Thank you for the review, @ltdrdata.

I've fixed the path traversal vulnerability in workflow_service.py:

• Added _safe_path() method that validates filenames and ensures resolved paths stay within workflows_dir using Path.resolve()
• Applied path validation to all public methods: import_files, get_raw, rename, delete, analyze, change_thumbnail
• Strengthened _validate_filename() with ., .., and null byte checks

Commit: ketle-man/ComfyUI-Workflow-Studio@42ffd8d
Release: https://github.com/ketle-man/ComfyUI-Workflow-Studio/releases/tag/v0.1.6

Could you please re-review when you have a chance?

[ketle-man]

Hi @ltdrdata,

I wanted to follow up on this PR. The path traversal vulnerability you flagged has been fixed in v0.1.6 (commit 42ffd8d) — _safe_path() was added to validate all filenames and ensure resolved paths stay within workflows_dir.

Since then, the plugin has grown significantly. Current version is v0.2.4 (commit e7fdfc4), with additions including:

• Models Tab — CivitAI integration, model grouping, preview images
• Workflow Studio Library — sidebar panel for browsing workflow/prompt presets in ComfyUI
• GenerateUI redesign — 3-tab layout with always-visible Raw JSON column

Could you please take another look when you have time? Thank you!