Bandit Report

blacklist: Standard pseudo-random generators are not suitable for security/cryptographic purposes.
Test ID: B311
Severity: LOW
Confidence: HIGH
CWE: CWE-330
File: /custom_nodes/ComfyUi-Ollama-YN/CompfyuiOllama.py
Line number: 172
More info: https://bandit.readthedocs.io/en/1.7.9/blacklists/blacklist_calls.html#b311-random

168	        pass
169	
170	    @classmethod
171	    def INPUT_TYPES(s):
172	        seed = random.randint(1, 2 ** 31)
173	        return {
174	            "required": {
175	                "prompt": ("STRING", {

blacklist: Standard pseudo-random generators are not suitable for security/cryptographic purposes.
Test ID: B311
Severity: LOW
Confidence: HIGH
CWE: CWE-330
File: /custom_nodes/ComfyUi-Ollama-YN/CompfyuiOllama.py
Line number: 288
More info: https://bandit.readthedocs.io/en/1.7.9/blacklists/blacklist_calls.html#b311-random

284	        pass
285	#The default system prompt referenced https://github.com/MinusZoneAI/ComfyUI-Prompt-MZ project
286	    @classmethod
287	    def INPUT_TYPES(s):
288	        seed = random.randint(1, 2 ** 31)
289	        return {
290	            "required": {
291	                "prompt": ("STRING", {

blacklist: Consider possible security implications associated with the subprocess module.
Test ID: B404
Severity: LOW
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/ComfyUi-Ollama-YN/__init__.py
Line number: 4
More info: https://bandit.readthedocs.io/en/1.7.9/blacklists/blacklist_imports.html#b404-import-subprocess

1	from .CompfyuiOllama import NODE_CLASS_MAPPINGS, NODE_DISPLAY_NAME_MAPPINGS
2	import sys
3	import os
4	import subprocess
5	import threading
6	import locale
7	
8	def handle_stream(stream, is_stdout):

subprocess_without_shell_equals_true: subprocess call - check for execution of untrusted input.
Test ID: B603
Severity: LOW
Confidence: HIGH
CWE: CWE-78
File: /custom_nodes/ComfyUi-Ollama-YN/__init__.py
Line number: 18
More info: https://bandit.readthedocs.io/en/1.7.9/plugins/b603_subprocess_without_shell_equals_true.html

14	        else: 
15	            print(msg, end="", file=sys.stderr)
16	
17	def process_wrap(cmd_str, cwd=None):
18	    process = subprocess.Popen(cmd_str, cwd=cwd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, bufsize=1)
19	
20	    stdout_thread = threading.Thread(target=handle_stream, args=(process.stdout, True))
21	    stderr_thread = threading.Thread(target=handle_stream, args=(process.stderr, False))