aiconfig-projects

Fail

Audited by Runlayer on Feb 24, 2026

Risk Level: HIGH
Scan Summary
Max Score
93%
Files
11
Flagged
10
Chunks
19
Flagged Files (10)
references/iac-automation.mdHIGH
93.1%

Malicious tool definition detected

## Terraform ### LaunchDarkly Terraform Provider Install and configure the LaunchDarkly Terraform provider: ```hcl # terraform/main.tf terraform { required_providers { launchdarkly = { source = "launchdarkly/launchdarkly" version = "~> 2.0" } } } provider "launchdarkly" { access_token = var.launchdarkly_access_token } ``` ### Define Projects ```hcl # terraform/projects.tf variable "launchdarkly_access_token" { description = "LaunchDarkly API access token" type = string sensitive = true } resourc

Description: = pm.get_sdk_key(spec['key'], 'production') sdk_key_test = pm.get_sdk_key(spec['key'], 'test') # Create Kubernetes Secret config.load_incluster_config() v1 = client.CoreV1Api() secret = client.V1Secret( metadata=client.V1ObjectMeta( name=spec.get('secretName', f"{name}-sdk-keys"), namespace=namespace ), string_data={ 'sdk-key-production': sdk_key_prod, 'sdk-key-test': sdk_key_test } ) v1.create_namespaced_secret(namespace, secret) return {'message': f'Created project {spec["key"]}'}

references/multi-language-setup.mdHIGH
92.0%

Tool passed security scan

Malicious tool definition detected

Automation Automate project creation for new services: ```bash # scripts/new-service.sh #!/bin/bash SERVICE_NAME=$1 LANGUAGE=$2 # Create project python scripts/create_project.py \ --name "$SERVICE_NAME Service" \ --key "$SERVICE_NAME" \ --tags "language:$LANGUAGE,type:service" # Generate template cp -r "templates/$LANGUAGE" "services/$SERVICE_NAME" # Setup SDK key cd "services/$SERVICE_NAME" bash setup.sh echo "✓ New service $SERVICE_NAME created" ``` ## Next Steps - [Setup environment configura

references/project-cloning.mdHIGH
88.2%

Tool passed security scan

Malicious tool definition detected

Verification Verify clones after creation: ```python def verify_clones(clones: List[str]): """Verify all cloned projects exist and have SDK keys.""" pm = ProjectManager() for project_key in clones: project = pm.get_project(project_key) if not project: print(f"✗ {project_key} not found") continue sdk_key = pm.get_sdk_key(project_key, "production") if sdk_key: print(f"✓ {project_key} verified") else: print(f"⚠️ {project_key} missing SDK key") ``` ## Next Steps - [Save SDK keys for cloned projects]

SKILL.mdHIGH
87.2%

Malicious tool definition detected

references/admin-tooling.mdHIGH
85.8%

Malicious tool definition detected

## Use Cases - **Bulk operations:** Create/manage many projects at once - **Auditing:** Report on project usage and configuration - **Maintenance:** Clean up unused projects - **Onboarding:** Help teams set up their projects - **Automation:** Integrate with CI/CD and IaC ## Full-Featured CLI Build a comprehensive CLI tool: ### Python with Click ```python # cli/ldprojects.py import click import json from tabulate import tabulate from launchdarkly.projects import ProjectManager pm = ProjectManager

references/env-config.mdHIGH
75.1%

Malicious tool definition detected

""" print("⚠️ SDK key rotation must be done via LaunchDarkly UI") print(f" Go to: Project Settings → Environments → {environment} → Reset SDK Key") ``` ### 4. Least Privilege Access - API tokens for project creation: `projects:write` - Application SDK keys: read-only by default - Separate keys for test vs production ## Verification After saving SDK keys, verify they work: ```python def verify_sdk_key(sdk_key: str): """Verify SDK key works by testing connection.""" import ldclient from ldclient.c

Description: config = Config(sdk_key) client = ldclient.get() if client.is_initialized(): print("✓ SDK key is valid and working") return True else: print("✗ SDK key failed to initialize") return False ``` ## Next Steps - [Integrate SDK in your application](../aiconfig-sdk/SKILL.md) - [Set up project cloning](project-cloning.md) - [Build automation scripts](iac-automation.md)

references/go-setup.mdHIGH
72.0%

Malicious tool definition detected

", project.Name, project.Key) } } ``` ## HTTP Server Integration Integrate into an HTTP server: ```go // cmd/server/main.go package main import ( "log" "net/http" "os" "yourmodule/pkg/launchdarkly" ) func main() { // Initialize LaunchDarkly project pm := launchdarkly.NewProjectManager(os.Getenv("LAUNCHDARKLY_API_TOKEN")) project, err := pm.CreateProject( "Go API Service", "go-api-service", []string{"api", "ai-configs"}, ) if err != nil { log.Fatalf("Failed to initialize LaunchDarkly: %v", err) }

README.mdMEDIUM
59.0%

Tool passed security scan

references/nodejs-setup.mdMEDIUM
56.9%

Tool passed security scan

references/quick-start.mdLOW
39.4%

Tool passed security scan

Passed Files (1)Click to expand
references/python-setup.mdOK
23.1%

Tool passed security scan

Audit Metadata
Max File Score
93%
Classification
UNKNOWN_SERVER
Files Scanned
11
Files Flagged
10
Chunks Analyzed
19
Analyzed
Feb 24, 2026, 01:20 AM
Security Audit — runlayer — aiconfig-projects