
Product
Socket Threat Intel Now Shows Which Malware Campaigns Were Blocked or Detected
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
E2E QA automation for user-facing frontend repos. AI-driven Playwright tests with video recording, HUD overlay, and structured reports.
Tell your AI agent (Claude Code, Cursor, etc.):
run npx comfy-qa setup
The agent reads the emitted prompt and automatically:
playwright.qa.config.ts with video/trace/screenshot enabled.claude/skills/comfy-qa/SKILL.md tailored to your repo.claude/skills/comfy-qa/REPRODUCE.md for issue reproductiontests/e2e/qa.spec.ts covering your key routes.gitignoreRe-running npx comfy-qa setup updates existing files without overwriting what's already correct.
# Paste a GitHub URL — auto-detects PR vs issue
comfy-qa https://github.com/org/repo/pull/123
comfy-qa https://github.com/org/repo/issues/456
# Or use subcommands
comfy-qa pr https://github.com/org/repo/pull/123
comfy-qa issue org/repo#456
# Batch QA recent open issues
comfy-qa full org/repo --limit 5
Each run produces in .comfy-qa/<slug>/:
| File | Content |
|---|---|
report.md | Full QA report — bug analysis, checklist, test scenarios |
qa-sheet.md | Printable QA checklist for manual testing |
<type>-<N>.e2e.ts | Generated Playwright E2E test |
qa-<N>.webm | Recorded session video with HUD overlay |
screenshots/ | Step-by-step screenshots |
research.json | Raw research data |
agent-log.txt | Agent action log |
--no-record Disable video recording (ON by default)
--add-comment Post report as GitHub comment
--comfy-url <url> Point to a running dev server (default: auto-detect)
--limit N Number of issues for batch mode (default: 5)
No mocks. QA runs against real servers:
tmp/, build, run locally, point the frontend to localhostbun install
Short-term, in priority order:
Improve reproduction precision. Current pipeline misses bugs that depend on specific workflows or custom nodes (see PR #9430 — 8/11 reproduced). Environment setup tools (workflow loader, custom-node installer, attachment downloader) close this gap.
Measure reliability (flakiness). Run the same checklist N times, track pass→fail→pass transitions per operation. A QA run is only trustworthy if its result is stable across repeats. Surface flaky operations on the dashboard.
Auto-file GitHub issues for failing operations — gated behind a
confidence threshold. scripts/report-failures.sh exists but is intentionally
not wired up yet: while reproduction rate is still ~70%, auto-filing would
drown maintainers in false positives. Enable once (1) and (2) lift the
floor, and keep a manual review step before filing the first batch per repo.
Cross-product QA matrix. Today: registry, docs, website, download-data,
embedded-editor. Add cloud.comfy.org (WebGL, already working via
--headless=new), comfy-vibe, and first-party ComfyUI_frontend runs.
Continuous QA. Schedule daily runs, track score trends per product, alert on regressions (score drop ≥ 10%).
MIT
FAQs
ComfyUI QA automation CLI
The npm package comfy-qa receives a total of 0 weekly downloads. As such, comfy-qa popularity was classified as not popular.
We found that comfy-qa demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.

Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.

Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.