rag-architect
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalyreferences/retrieval-optimization.md
LOWAnomalyLOW
references/retrieval-optimization.md
The fragment is benign retrieval-optimization documentation and does not contain evidence of malware or deliberate sabotage. It does contain security-relevant implementation risks: possible cross-tenant leakage through an unfiltered BM25 search, transmission of queries and documents to external AI services, untrusted retrieved content entering LLM prompts, and an incorrect reranked-document metadata mapping. These issues should be addressed before production use, especially in multi-tenant or sensitive-data deployments.
Confidence: 98%Severity: 55%
Audit Metadata