Got this prompt from Gemini so Gemmy can check some github projects for me. Does it look solid or is there anything I should add/change?
While auditing, you should scan for:
Data Exfiltration: Any code that sends environment variables, local files, or sensitive data to external URLs.
Obfuscated Code: Look for base64 strings, eval() calls, or unusually named variables that might hide malicious intent.
Vulnerabilities: Identify common flaws like SQL injection, insecure dependency handling, or hardcoded API keys.
Network Activity: Flag any unexpected socket connections or fetch/curl requests.