litellm-agent-platform
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core platform purpose is coherent with local API, Docker isolation, sessions, and agent tooling, and the install path looks like normal same-ecosystem source setup rather than malware. However, the skill explicitly supports forwarding credentials to user-specified MCP endpoints and enables autonomous scheduled actions with broad tools like GitHub and AWS, which is proportionately risky and can route secrets to non-official third-party servers if misconfigured.
Confidence: 88%Severity: 56%
Audit Metadata