sensei
Audited by Socket on Apr 3, 2026
1 alert found:
AnomalyThis module is an automation tool for evaluating and optimizing SKILL.md routing prompts using repository-provided trigger cases and an external GEPA/LiteLLM optimizer. No clear malicious code paths (e.g., reverse shells, persistence, arbitrary network exfiltration logic, or eval/exec backdoors) are visible in this fragment. The main security concern is credential handling: it invokes 'gh auth token' and repurposes the returned token as OPENAI_API_KEY, then performs remote LLM calls using configured endpoints—creating a sensitive trust boundary and increasing the impact of misconfiguration or a compromised downstream dependency. Secondary risks include heuristic parsing of repository test files and potential exposure of repository content through stdout/logging.