llm-patterns
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
[Skill Scanner] Backtick command substitution detected No malicious behavior detected. The code is consistent with its stated purpose: a typed LLM wrapper, prompt templates, validation with Zod, testing patterns, and optional metrics. Main issues are robustness (assumptions about response shape and direct JSON.parse of LLM output) and a minor information-leak risk from logging metrics to console. These are maintainability/security hygiene issues rather than indicators of supply-chain maliciousness.
Confidence: 85%Severity: 75%
Audit Metadata