sensei

Warn

Audited by Socket on Apr 3, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/gepa/auto_evaluator.py

This module is an automation tool for evaluating and optimizing SKILL.md routing prompts using repository-provided trigger cases and an external GEPA/LiteLLM optimizer. No clear malicious code paths (e.g., reverse shells, persistence, arbitrary network exfiltration logic, or eval/exec backdoors) are visible in this fragment. The main security concern is credential handling: it invokes 'gh auth token' and repurposes the returned token as OPENAI_API_KEY, then performs remote LLM calls using configured endpoints—creating a sensitive trust boundary and increasing the impact of misconfiguration or a compromised downstream dependency. Secondary risks include heuristic parsing of repository test files and potential exposure of repository content through stdout/logging.

Confidence: 62%Severity: 58%
Audit Metadata
Analyzed At
Apr 3, 2026, 06:04 PM
Package URL
pkg:socket/skills-sh/microsoft%2Fgithub-copilot-for-azure%2Fsensei%2F@1dcb3f7915f26904de1262132b596ca348b0b8d9