ruby-llm

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
references/streaming.md

No evidence of malware or supply-chain sabotage appears in this documentation fragment. The examples contain client-side XSS risks because LLM output is inserted as HTML without sanitization. Render streamed content as text or apply an appropriate HTML sanitizer, and avoid placing sensitive prompts in query strings.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Oct 9, 2026, 05:27 AM
Package URL
pkg:socket/skills-sh/faqndo97%2Fai-skills%2Fruby-llm%2F@41fdc2730b8d6439466bafc4f06b3d1097049fd63636c2331db0a05f7191032a