Bandit Report

blacklist: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/ComfyUI-Documents/__init__.py
Line number: 2
More info: https://bandit.readthedocs.io/en/1.7.9/blacklists/blacklist_imports.html#b404-import-subprocess

1	import os
2	import subprocess
3	import sys
4	from .document_nodes import NODE_CLASS_MAPPINGS, NODE_DISPLAY_NAME_MAPPINGS
5	from .utils import folder_paths
6	from .server import WEB_DIRECTORY
7	
8	__all__ = ['NODE_CLASS_MAPPINGS', 'NODE_DISPLAY_NAME_MAPPINGS', 'WEB_DIRECTORY']

subprocess_without_shell_equals_true: subprocess call - check for execution of untrusted input.
Test ID: B603
Severity: LOW
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/ComfyUI-Documents/__init__.py
Line number: 13
More info: https://bandit.readthedocs.io/en/1.7.9/plugins/b603_subprocess_without_shell_equals_true.html

9	
10	def install_requirements():
11	    requirements_path = os.path.join(os.path.dirname(__file__), "requirements.txt")
12	    try:
13	        subprocess.check_call([sys.executable, "-m", "pip", "install", "-r", requirements_path])
14	        print("Successfully installed requirements for ComfyUI-Documents")
15	    except subprocess.CalledProcessError as e:
16	        print(f"Error installing requirements: {e}")

blacklist: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/ComfyUI-Documents/install.py
Line number: 1
More info: https://bandit.readthedocs.io/en/1.7.9/blacklists/blacklist_imports.html#b404-import-subprocess

1	import subprocess
2	import sys
3	import os
4	
5	def install_requirements():
6	    requirements_path = os.path.join(os.path.dirname(__file__), "requirements.txt")
7	    try:
8	        subprocess.check_call([sys.executable, "-m", "pip", "install", "-r", requirements_path])

subprocess_without_shell_equals_true: subprocess call - check for execution of untrusted input.
Test ID: B603
Severity: LOW
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/ComfyUI-Documents/install.py
Line number: 8
More info: https://bandit.readthedocs.io/en/1.7.9/plugins/b603_subprocess_without_shell_equals_true.html

4	
5	def install_requirements():
6	    requirements_path = os.path.join(os.path.dirname(__file__), "requirements.txt")
7	    try:
8	        subprocess.check_call([sys.executable, "-m", "pip", "install", "-r", requirements_path])
9	        print("Successfully installed requirements for ComfyUI-Documents")
10	    except subprocess.CalledProcessError as e:
11	        print(f"Error installing requirements: {e}")