llm-patterns

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

[Skill Scanner] Backtick command substitution detected No malicious behavior detected. The code is consistent with its stated purpose: a typed LLM wrapper, prompt templates, validation with Zod, testing patterns, and optional metrics. Main issues are robustness (assumptions about response shape and direct JSON.parse of LLM output) and a minor information-leak risk from logging metrics to console. These are maintainability/security hygiene issues rather than indicators of supply-chain maliciousness.

Confidence: 85%Severity: 75%
Audit Metadata
Analyzed At
Mar 18, 2026, 04:51 PM
Package URL
pkg:socket/skills-sh/alinaqi%2Fclaude-bootstrap%2Fllm-patterns%2F@bab379278cb7e8d5cbd6e9fec047d7e7be1dbdad