rag-architect

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
references/retrieval-optimization.md

The fragment is benign retrieval-optimization documentation and does not contain evidence of malware or deliberate sabotage. It does contain security-relevant implementation risks: possible cross-tenant leakage through an unfiltered BM25 search, transmission of queries and documents to external AI services, untrusted retrieved content entering LLM prompts, and an incorrect reranked-document metadata mapping. These issues should be addressed before production use, especially in multi-tenant or sensitive-data deployments.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 17, 2026, 03:30 PM
Package URL
pkg:socket/skills-sh/hainamchung%2Fagent-assistant%2Frag-architect%2F@3708fb4d63595138e890a86239261833b05707850d68e2da28e839114f262912