llm-gateway

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches container images from established and trusted sources.
  • ghcr.io/berriai/litellm: Fetches the LiteLLM proxy image from the official GitHub Container Registry.
  • postgres:16-alpine, redis:7-alpine: Pulls official base images from Docker Hub for the supporting infrastructure stack.
  • [COMMAND_EXECUTION]: Utilizes standard system commands for deployment and administrative tasks.
  • docker run, docker-compose: Used to orchestrate the containerized environment.
  • curl: Used for interacting with the management API to generate keys, check health, and monitor spend.
  • [CREDENTIALS_UNSAFE]: Follows security best practices for handling sensitive credentials in documentation.
  • Environment variables (e.g., ${OPENAI_API_KEY}, os.environ/LITELLM_MASTER_KEY) are correctly referenced for all actual API secrets.
  • The string password is used as a placeholder for internal database communication in the Docker Compose example, which is standard for illustrative configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:05 AM