Skip to main content

ai-integration

Guides integration of AI and LLM features into applications, covering chat interfaces, streaming responses, and RAG pipelines.

Install this skill

or
23/100

Security score

The ai-integration skill was audited on Feb 28, 2026 and we found 29 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 231

Template literal with variable interpolation in command context

SourceSKILL.md
231<div key={m.id} className={`flex ${m.role === 'user' ? 'justify-end' : 'justify-start'}`}>
medium line 232

Template literal with variable interpolation in command context

SourceSKILL.md
232<div className={`max-w-md px-4 py-2 rounded-lg ${
medium line 340

Template literal with variable interpolation in command context

SourceSKILL.md
340controller.enqueue(encoder.encode(`data: ${JSON.stringify({ content })}\n\n`));
medium line 481

Template literal with variable interpolation in command context

SourceSKILL.md
481content: `You are a helpful assistant. Use the following context to answer the user's question:\n\n${contextText}`,
medium line 531

Template literal with variable interpolation in command context

SourceSKILL.md
531return db.execute(sql`
medium line 702

Template literal with variable interpolation in command context

SourceSKILL.md
702throw new Error(`Rate limit exceeded. Try again in ${Math.ceil((reset - Date.now()) / 1000)}s`);
medium line 788

Template literal with variable interpolation in command context

SourceSKILL.md
788throw new Error(`Content flagged for: ${categories.join(', ')}`);
medium line 907

Template literal with variable interpolation in command context

SourceSKILL.md
907const key = `ai:cost:${today}`;
medium line 917

Template literal with variable interpolation in command context

SourceSKILL.md
917const cost = await redis.get<number>(`ai:cost:${today}`);
medium line 123

Access to .env file

SourceSKILL.md
123**Check .env.example for documentation:**
low line 128

Access to .env file

SourceSKILL.md
128- path: ".env.example"
low line 137

Access to .env file

SourceSKILL.md
137- file: ".env.example"
low line 283

Access to .env file

SourceSKILL.md
283const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });
low line 324

Access to .env file

SourceSKILL.md
324const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });
low line 426

Access to .env file

SourceSKILL.md
426const apiKey = process.env.PINECONE_API_KEY;
low line 553

Access to .env file

SourceSKILL.md
553host: process.env.WEAVIATE_HOST!,
low line 554

Access to .env file

SourceSKILL.md
554apiKey: { apiKey: process.env.WEAVIATE_API_KEY! },
low line 688

Access to .env file

SourceSKILL.md
688url: process.env.UPSTASH_REDIS_REST_URL!,
low line 689

Access to .env file

SourceSKILL.md
689token: process.env.UPSTASH_REDIS_REST_TOKEN!,
low line 777

Access to .env file

SourceSKILL.md
777const openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });
low line 885

Access to .env file

SourceSKILL.md
885url: process.env.UPSTASH_REDIS_REST_URL!,
low line 886

Access to .env file

SourceSKILL.md
886token: process.env.UPSTASH_REDIS_REST_TOKEN!,
medium line 939

Access to .env file

SourceSKILL.md
9392. API keys documented in .env.example
medium line 747

Prompt injection: new instructions directive

SourceSKILL.md
747/new instructions:/i,
low line 592

External URL reference

SourceSKILL.md
592const url = new URL('https://api.weather.com/v1/current');
low line 825

External URL reference

SourceSKILL.md
825const req = new Request('http://localhost/api/chat', {
low line 999

External URL reference

SourceSKILL.md
999- [Vercel AI SDK Documentation](https://sdk.vercel.ai/docs)
low line 1000

External URL reference

SourceSKILL.md
1000- [OpenAI API Reference](https://platform.openai.com/docs/api-reference)
low line 1002

External URL reference

SourceSKILL.md
1002- [LangChain Documentation](https://js.langchain.com/docs/)
Scanned on Feb 28, 2026
View Security Dashboard