Reuse ComfyUI's installed torch, numpy, Pillow, and related packages; declare only additional dependencies. Inspect existing pins before extending a pack, and report conflicts rather than replacing a shared dependency. Call out filesystem, network, custom endpoints, persistent state, credentials, and very large outputs. They may work locally and remain Cloud-incompatible: report the two verdicts separately. Never persist credentials in generated source.
Never put credentials in widget values: workflows and image metadata can retain them. Read secrets from the environment or the target runtime's supported configuration mechanism.