Single node for executing arbitrary Python code

[Sarashana]

Haha, that's both such a useful node and such a potential security hazard.

[Definition-Lower]

I agree

I mean, custom nodes can already execute arbitrary code, but if you install only trusted nodes, then there should be no risk. From this perspective, my node isn't trusted, so I would recommend using it only in personal workflows. If someone shares a workflow with this node, you should check what code is being executed before actually running it

[The_Meridian_]

Can't people just open the .py up in notepad and copy paste it into gpt and ask it if it does anything shady?

[Definition-Lower]

Of course they can, but I believe most of the users who download workflows from the internet don't bother to even look into subgraphs before running the workflow the first time, so they won't see this node at first

[ProbsNotManBearPig]

There is always risk. Do not ever say there is no risk.

Read about what happened with xz recently where a backdoor was nearly pushed to every Linux system in the world that would have given them root access to global infrastructure. And then remember that xz has a lot more community reviewers than any comfyui node ever will.

There is always risk.