guidance
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
SecuritySecurityreferences/common-patterns.md
MEDIUMSecurityMEDIUM
references/common-patterns.md
The examples do not show clear malware or obfuscation. The ReAct calculator is unsafe because it evaluates model-generated text as Python, creating an arbitrary-code-execution risk when the example runs. Avoid eval and use a restricted arithmetic parser or other narrowly scoped calculator implementation. Do not send sensitive prompt data to an external model unless permitted.
Confidence: 99%Severity: 78%
Audit Metadata