Add ComfyUI-TJ_NODE_STUDIO_ONE to custom-node-list

[designloves2]

Hi, I would like to add my new custom node package ComfyUI-TJ_NODE_STUDIO_ONE to the ComfyUI Manager custom node list.

Repository:
https://github.com/designloves2/ComfyUI-TJ_NODE_STUDIO_ONE

This package provides one-node studio UIs for Z-Image Turbo, Flux.2 Klein, Qwen Image Edit 2511, and Krea 2 workflows, including T2I, I2I, inpaint, outpaint, edit, faceswap, angle, and upscale modes.

Only custom-node-list.json is changed in this PR.

Thank you!

[coderabbitai]

📝 Walkthrough

Walkthrough

Adds one custom_nodes entry to custom-node-list.json for ComfyUI-TJ_NODE_STUDIO_ONE, including author/title/id fields, repository links, git-clone install type, and a description of supported workflow modes.

Changes

Custom node registry update

Layer / File(s)	Summary
Add custom node entry custom-node-list.json	Adds one custom_nodes entry for ComfyUI-TJ_NODE_STUDIO_ONE with author/title/id metadata, repository URLs, git-clone install type, and workflow description text.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

✨ Simplify code

• Create PR with simplified code

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@custom-node-list.json`:
- Around line 5-9: The registry entry for the TJ node package is using a name
that does not match the upstream install instructions, which can mislead users
and break discovery. Verify the canonical package identifier with the upstream
repository owner, then update the entry’s title/id/reference and any related
docs together so the Manager name, clone target, and repo URL all use the same
identifier. Use the existing custom-node-list.json entry for
ComfyUI-TJ_NODE_STUDIO_ONE as the place to align these symbols.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: e6bd45a6-9645-43d9-a086-7efac189ccae

📥 Commits

Reviewing files that changed from the base of the PR and between 8da299d and a227457.

📒 Files selected for processing (1)

• custom-node-list.json

[coderabbitai]

🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Align the registry name with the upstream install docs.

The upstream README still tells users to search for ComfyUI-TJ_NODE_ONE in Manager and to clone designloves2/ComfyUI-TJ_NODE_ONE.git, but that repo currently 404s. Registering this as ComfyUI-TJ_NODE_STUDIO_ONE means the name game is out of tune and can send users on a dead-link chase. Please confirm the canonical package identifier upstream before merging, or update the registry entry/docs together. (github.com)

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@custom-node-list.json` around lines 5 - 9, The registry entry for the TJ node
package is using a name that does not match the upstream install instructions,
which can mislead users and break discovery. Verify the canonical package
identifier with the upstream repository owner, then update the entry’s
title/id/reference and any related docs together so the Manager name, clone
target, and repo URL all use the same identifier. Use the existing
custom-node-list.json entry for ComfyUI-TJ_NODE_STUDIO_ONE as the place to align
these symbols.

[designloves2]

fixed done

_{Commented from CodeRabbit Change Stack}

[coderabbitai]

@designloves2 Thanks for the update — sounds aligned and tidy now. Name of the game: fixed, no drift.

[ltdrdata]

Thanks for the contribution! Before this can be merged, the following need to be addressed:

1. Path Traversal (arbitrary file read) — nodes.py:576 and nodes.py:1150 — the copy_to_input handlers build source paths from POST body filename / subfolder fields with no containment check. An absolute path or .. escapes the base directory, and shutil.copy2 then copies the arbitrary file into the ComfyUI input directory (where it's read-back via /view). Please validate Path(src).resolve().is_relative_to(Path(base).resolve()) before the copy, and reject the request otherwise.

2. Command Injection risk (please clarify) — a static-analysis flag on os.system / subprocess usage in nodes.py. Please confirm whether any user-controlled input reaches shell arguments; if so, switch to subprocess.run([...], shell=False) with an argument list, or shlex.quote() untrusted inputs.

3. Non-English tooltips (Korean) — please write UI strings (widget tooltips, RETURN_NAMES, CATEGORY, DISPLAY_NAME) in English. For multilingual support, see the locale feature: [i18n] Add /i18n endpoint to provide all custom node translations ComfyUI#6558

I'll re-evaluate once these are addressed.