Security audit
Security checks for vulnerabilities and agentic risk
This skill is documentation for using an LLM chat library, with disclosed external API use and session history features that fit its stated purpose.
Install only if you intend to send chat prompts to an OpenAI-compatible provider. Configure the base URL and API key for a provider you trust, avoid sending secrets or sensitive data unless that provider is approved for it, and set a finite session timeout if retained chat history is not desired.
Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.
for msg in chat.history: print(f"{msg['role']}: {msg['content']}")
chat.clear_history()
Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.
| `ask(prompt, stream=False)` | Single-turn conversation without history |
| `chat(prompt, stream=True)` | Multi-turn conversation with history tracking |
| `update_system_prompt(prompt)` | Update system prompt in-place |
| `clear_history()` | Clear conversation history (keeps system prompt) |
| `history` (property) | Get copy of current conversation history |
### ChatManager
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Create chat instance
chat = LLMChat(
base_url="https://api.example.com/v1",
api_key="your_api_key",
model="deepseek-chat"
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Create chat instance
chat = LLMChat(
base_url="https://api.example.com/v1",
api_key="your_api_key",
model="deepseek-chat"
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Create chat instance
chat = LLMChat(
base_url="https://api.example.com/v1",
api_key="your_api_key",
model="deepseek-chat"
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
| Parameter | Default | Description |
|-----------|---------|-------------|
| `base_url` | required | API base URL (e.g., `https://api.deepseek.com/v1`) |
| `api_key` | required | API authentication key |
| `model` | `"deepseek-chat"` | Model name |
| `temperature` | `0.7` | Controls randomness (0-2) |
The documented default value for system_prompt is the Chinese string 你是一个严谨的助手, which imposes a specific language/locale by default. The file does not indicate that users can opt in to this locale preference or that the default is region-specific and justified.
No suspicious patterns detected.