solvit-cli@0.2.1
Solve or fix a coding file from your terminal using any OpenAI-compatible LLM endpoint.
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe inspected source shows ordinary, user-invoked CLI behavior: solving submits file content to a model endpoint, and chat authentication targets the selected chat server. The built-in endpoint uses HTTP, but source inspection found no unrelated credential transfer, install hook, or concrete attack behavior.
Decision evidence
public snapshot- The manifest exposes an interactive CLI entry point and declares no lifecycle scripts.
- Chat uses the configured or built-in server URL for API requests, and prompts the user for login credentials.
- The solver sends file content to the configured or built-in model endpoint when the user runs a solve command.
- Chat requires an interactive terminal; the inspected runtime hint handles ordinary chat navigation.
Source & flagged code
7 flaggedChat uses the configured or built-in server URL for API requests, and prompts the user for login credentials.
bin/chat.jsView on unpkg · L31Chat uses the configured or built-in server URL for API requests, and prompts the user for login credentials.
bin/chat.jsView on unpkg · L42Findings
Affected versions and remediation
This report applies to solvit-cli@0.2.1.
See all versions of solvit-cli for other recorded verdicts.
- Review the evidence and your use of solvit-cli@0.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.