Mintplex-Labs/anything-llm hook
llm application
AnythingLLM is an all-in-one server application for building private AI chat experiences with document ingestion and agent automation. It supports multiple users, works with dozens of LLM providers (both open-source and commercial), includes vector database integration, and runs locally by default with minimal configuration.
Deploy as a self-hosted server to create a private ChatGPT-like interface for your organization Ingest and chat with documents across multiple file types (PDF, TXT, DOCX, etc.) with source citations Build and run AI agents to automate complex workflows, web browsing, and scheduled tasks Connect to your preferred LLM provider and embedder model from a list of 40+ supported services Manage multi-user access with workspace-level permissions and individual user configurations ⚠ REVIEW
Risk score 65/100
7 HIGH✓ 65 MEDIUM 6 LOW 16 INFO
✓ CRITICAL/HIGH reflect AI-verified findings (false positives excluded) · MEDIUM/LOW/INFO are unverified scanner output
AI-verified (CRITICAL/HIGH): 7 likely real (100%) 15 false positive — excluded from CRITICAL/HIGH count above
Findings by checker · 4 high-signal, 3 mostly false-positive (hidden by default)
CHK-125 4 findings 4 likely
0% FP CHK-073 1 finding 1 likely
0% FP CHK-099 1 finding 1 likely
0% FP CHK-074 1 finding 1 likely
0% FP ▼ Show 3 checkers that are mostly false positives (15 findings) 94 findings click to expand
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in commands/base.ts
open-computer/cli/src/commands/base.ts
AI: likely real likely ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in src/ssh.ts
open-computer/cli/src/ssh.ts
AI: likely real likely ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in ffmpeg/index.js
collector/utils/WhisperProviders/ffmpeg/index.js
AI: likely real likely ▼
CHK-073 Curl Pipe Bash Install detected in open-computer/master/setup/provision.sh
open-computer/master/setup/provision.sh
AI: likely real likely ▼
CHK-099 Potential IDOR — 'user_id' accessed without ownership check
server/endpoints/api/workspaceThread/index.js
AI: likely real possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in src/vm.ts
open-computer/cli/src/vm.ts
AI: likely real likely ▼
CHK-074 Permission bypass referenced in documentation
open-computer/README.md
AI: likely real likely ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in anythingllm/README.md.gotmpl
cloud-deployments/helm/charts/anythingllm/README.md.gotmpl
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in anythingllm/README.md
cloud-deployments/helm/charts/anythingllm/README.md
possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in templates/NOTES.txt
cloud-deployments/helm/charts/anythingllm/templates/NOTES.txt
possible ▼
CHK-125a fs.readFile — filesystem read access — no scope constraint in PDFLoader/index.js
collector/processSingleFile/convert/asPDF/PDFLoader/index.js
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in RepoLoader/index.js
collector/utils/extensions/RepoLoader/GitlabRepo/RepoLoader/index.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in endpoints/system.js
server/endpoints/system.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in endpoints/workspaces.js
server/endpoints/workspaces.js
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in endpoints/utils.js
server/endpoints/utils.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in models/workspaceParsedFiles.js
server/models/workspaceParsedFiles.js
possible ▼
CHK-125b setuid() — privilege escalation — no scope constraint in models/telemetry.js
server/models/telemetry.js
possible ▼
CHK-125b chown — ownership change — no scope constraint in storage/README.md
server/storage/README.md
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in jobs/cleanup-generated-files.js
server/jobs/cleanup-generated-files.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in jobs/cleanup-orphan-documents.js
server/jobs/cleanup-orphan-documents.js
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in database/index.js
server/utils/database/index.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in agents/imported.js
server/utils/agents/imported.js
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in SpeechToText/helpers.js
server/utils/SpeechToText/helpers.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in files/logo.js
server/utils/files/logo.js
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in chats/exportChatToFile.js
server/utils/chats/exportChatToFile.js
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in plugins/file-history.js
server/utils/agents/aibitat/plugins/file-history.js
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in create-files/lib.js
server/utils/agents/aibitat/plugins/create-files/lib.js
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in filesystem/lib.js
server/utils/agents/aibitat/plugins/filesystem/lib.js
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in filesystem/search-files.js
server/utils/agents/aibitat/plugins/filesystem/search-files.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in gmail/lib.js
server/utils/agents/aibitat/plugins/gmail/lib.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in outlook/lib.js
server/utils/agents/aibitat/plugins/outlook/lib.js
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in docx/test-themes.js
server/utils/agents/aibitat/plugins/create-files/docx/test-themes.js
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in SQLConnectors/utils.js
server/utils/agents/aibitat/plugins/sql-agent/SQLConnectors/utils.js
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in milvus/MILVUS_SETUP.md
server/utils/vectorDbProviders/milvus/MILVUS_SETUP.md
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in utils/format.js
server/utils/telegramBot/utils/format.js
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in src/vm.ts
open-computer/cli/src/vm.ts
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in commands/base.ts
open-computer/cli/src/commands/base.ts
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in commands/control.ts
open-computer/cli/src/commands/control.ts
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in commands/control.ts
open-computer/cli/src/commands/control.ts
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in commands/build.ts
open-computer/cli/src/commands/build.ts
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in commands/build.ts
open-computer/cli/src/commands/build.ts
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in setup/provision.sh
open-computer/master/setup/provision.sh
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in setup/a11y-action.py
open-computer/master/setup/a11y-action.py
possible ▼
CHK-125b chown — ownership change — no scope constraint in win10/apply-noninteractive.sh
open-computer/master/setup/themes/win10/apply-noninteractive.sh
possible ▼
CHK-125 child_process module — shell execution — no scope constraint in memory-manager/server.js
open-computer/services/memory-manager/server.js
possible ▼
CHK-125 os.system() — arbitrary shell execution — no scope constraint in extensions/save-deliverable.ts
open-computer/services/extensions/save-deliverable.ts
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in extensions/open-browser.ts
open-computer/services/extensions/open-browser.ts
possible ▼
CHK-125 child_process module — shell execution — no scope constraint in pi/process.js
open-computer/services/interface-service/pi/process.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in pi/process.js
open-computer/services/interface-service/pi/process.js
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in routes/deliverables.js
open-computer/services/interface-service/routes/deliverables.js
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in commands/control.ts
open-computer/cli/src/commands/control.ts
possible ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in collector/utils/WhisperProviders/ffmpeg/index.js [build-script context]
collector/utils/WhisperProviders/ffmpeg/index.js
possible ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in open-computer/cli/src/commands/control.ts [build-script context]
open-computer/cli/src/commands/control.ts
possible ▼
CHK-053 Tool 'create-scheduled-job' — unusually long description (682 chars)
server/utils/agents/aibitat/plugins/create-scheduled-job/index.js
possible ▼
CHK-053 Tool 'filesystem-read-text-file' — unusually long description (609 chars)
server/utils/agents/aibitat/plugins/filesystem/read-text-file.js
possible ▼
CHK-053 Tool 'filesystem-read-multiple-files' — unusually long description (511 chars)
server/utils/agents/aibitat/plugins/filesystem/read-multiple-files.js
possible ▼
CHK-053 Tool 'save_deliverable' — unusually long description (891 chars)
open-computer/services/extensions/save-deliverable.ts
possible ▼
CHK-054 Tool 'bash' — generic name without namespace prefix (shadow risk)
open-computer/services/extensions/visible-bash.ts
possible ▼
CHK-053 Tool 'browser_cdp' — unusually long description (538 chars)
open-computer/services/extensions/browser-cdp.ts
possible ▼
CHK-125b chown — ownership change — no scope constraint in docker/Dockerfile
docker/Dockerfile
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in .devcontainer/devcontainer.json
.devcontainer/devcontainer.json
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in open-computer/README.md
open-computer/README.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in open-computer/DEVELOPMENT.md
open-computer/DEVELOPMENT.md
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in locales/findUnusedTranslations.mjs
frontend/src/locales/findUnusedTranslations.mjs
possible ▼
CHK-125b chown — ownership change — no scope constraint in openshift/Dockerfile
cloud-deployments/openshift/Dockerfile
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in terraform/DEPLOY.md
cloud-deployments/digitalocean/terraform/DEPLOY.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in terraform/user_data.tp1
cloud-deployments/digitalocean/terraform/user_data.tp1
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in deployment/DEPLOY.md
cloud-deployments/gcp/deployment/DEPLOY.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in deployment/gcp_deploy_anything_llm.yaml
cloud-deployments/gcp/deployment/gcp_deploy_anything_llm.yaml
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in cloudformation/aws_https_instructions.md
cloud-deployments/aws/cloudformation/aws_https_instructions.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in cloudformation/cloudformation_create_anythingllm.json
cloud-deployments/aws/cloudformation/cloudformation_create_anythingllm.json
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in cloudformation/DEPLOY.md
cloud-deployments/aws/cloudformation/DEPLOY.md
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in helpers/customModels.js
server/utils/helpers/customModels.js
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in example/beginner-chat.js
server/utils/agents/aibitat/example/beginner-chat.js
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in YoutubeLoader/youtube-transcript.js
collector/utils/extensions/YoutubeTranscript/YoutubeLoader/youtube-transcript.js
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in plugins/web-browsing.js
server/utils/agents/aibitat/plugins/web-browsing.js
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in RepoLoader/index.js
collector/utils/extensions/RepoLoader/GithubRepo/RepoLoader/index.js
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in cerebras/index.js
server/utils/AiProviders/cerebras/index.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/pl/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/ro/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/zh/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/ar/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/ko/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/fr/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/et/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/fa/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/tr/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/ja/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
server/endpoints/api/admin/index.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/da/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/it/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/he/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/zh_TW/common.js
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
frontend/src/locales/cs/common.js
possible ▼
▼ Show 15 false positives (14% of this view) Last scanned: Jul 12, 2026
More servers
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
skypilot-org/skypilot 85
obra/superpowers 85
Foundational skill pack by Jesse Vincent now in anthropics/claude-plugins-official. Includes ffuf web-fuzzing/pentest skill. Partial analysis done — full hook and plugin inspection pending. tier=T2
191k★
Significant-Gravitas/AutoGPT 85
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
186k★
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
Scan your entire org's MCP deployment
2,500+ repos pre-scored. 22% carry CRITICAL findings.