[PR #787] [CLOSED] fix: resolve security vulnerabilities and code quality issues #5809

Closed
opened 2026-05-17 05:44:26 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/Shubhamsaboo/awesome-llm-apps/pull/787
Author: @Ggboykxz
Created: 5/8/2026
Status: Closed

Base: mainHead: fix/audit-security-and-quality-issues


📝 Commits (3)

  • 5f5b778 fix: resolve security vulnerabilities and code quality issues
  • 8d9a697 fix: migrate AutoGen to ag2, fix langchain imports, and update dependencies
  • 394b034 test: add functional tests for all security and quality fixes

📊 Changes

34 files changed (+663 additions, -538 deletions)

View changed files

📝 .gitignore (+40 -4)
📝 advanced_ai_agents/autonomous_game_playing_agent_apps/ai_chess_agent/ai_chess_agent.py (+81 -113)
📝 advanced_ai_agents/autonomous_game_playing_agent_apps/ai_chess_agent/requirements.txt (+1 -1)
📝 advanced_ai_agents/multi_agent_apps/agent_teams/ai_competitor_intelligence_agent_team/requirements.txt (+1 -1)
📝 advanced_ai_agents/multi_agent_apps/agent_teams/ai_game_design_agent_team/game_design_agent_team.py (+91 -188)
📝 advanced_ai_agents/multi_agent_apps/agent_teams/ai_real_estate_agent_team/ai_real_estate_agent_team.py (+1 -1)
📝 advanced_ai_agents/multi_agent_apps/agent_teams/ai_real_estate_agent_team/local_ai_real_estate_agent_team.py (+1 -1)
📝 advanced_ai_agents/multi_agent_apps/agent_teams/multimodal_coding_agent_team/ai_coding_agent_o3.py (+4 -4)
📝 advanced_ai_agents/multi_agent_apps/agent_teams/multimodal_design_agent_team/requirements.txt (+1 -1)
📝 advanced_ai_agents/multi_agent_apps/ai_financial_coach_agent/ai_financial_coach_agent.py (+4 -4)
📝 advanced_ai_agents/multi_agent_apps/ai_mental_wellbeing_agent/ai_mental_wellbeing_agent.py (+71 -136)
📝 advanced_ai_agents/multi_agent_apps/ai_mental_wellbeing_agent/requirements.txt (+2 -4)
📝 advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/integrations/slack/chat.py (+1 -1)
📝 advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/requirements.txt (+1 -1)
📝 advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/utils/get_articles.py (+10 -8)
📝 advanced_ai_agents/single_agent_apps/ai_recipe_meal_planning_agent/ai_recipe_meal_planning_agent.py (+4 -2)
📝 advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/agent/prompt/service.py (+1 -1)
📝 advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/agent/registry/service.py (+1 -1)
📝 advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/agent/tools/service.py (+1 -1)
📝 advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/tree/__init__.py (+1 -1)

...and 14 more files

📄 Description

Summary

This PR fixes critical security vulnerabilities and code quality issues found during a comprehensive audit of the codebase.

Security Fixes

  • CRITIQUE: Removed hardcoded API keys in 3 files (replaced with environment variables)
  • HAUTE: Fixed SQL injection vulnerability in get_articles.py using parameterized queries
  • HAUTE: Fixed deprecated OpenAI API import pattern

Code Quality Fixes

  • Fixed typo: renamed mutimodal_agent.py to multimodal_agent.py
  • Fixed bare except: clauses in 7 files (now uses specific exception handling)
  • Improved .gitignore completeness

Files Changed

  1. starter_ai_agents/multimodal_ai_agent/mutimodal_agent.py - renamed to multimodal_agent.py
  2. advanced_llm_apps/cursor_ai_experiments/local_chatgpt_clone/chatgpt_clone_llama3.py - hardcoded API key fixed
  3. advanced_llm_apps/llm_apps_with_memory_tutorials/llama3_stateful_chat/local_llama3_chat.py - hardcoded API key fixed
  4. advanced_llm_apps/cursor_ai_experiments/llm_router_app/llm_router.py - hardcoded API keys fixed
  5. advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/tree/__init__.py - bare except fixed
  6. advanced_ai_agents/single_agent_apps/ai_recipe_meal_planning_agent/ai_recipe_meal_planning_agent.py - bare except fixed (2 occurrences)
  7. advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/integrations/slack/chat.py - bare except fixed
  8. advanced_ai_agents/multi_agent_apps/ai_financial_coach_agent/ai_financial_coach_agent.py - bare except fixed (2 occurrences)
  9. advanced_ai_agents/multi_agent_apps/agent_teams/multimodal_coding_agent_team/ai_coding_agent_o3.py - bare except fixed (4 occurrences)
  10. advanced_ai_agents/multi_agent_apps/agent_teams/ai_real_estate_agent_team/local_ai_real_estate_agent_team.py - bare except fixed
  11. advanced_ai_agents/multi_agent_apps/agent_teams/ai_real_estate_agent_team/ai_real_estate_agent_team.py - bare except fixed
  12. advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/utils/get_articles.py - SQL injection + deprecated API fixed
  13. .gitignore - improved completeness

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Shubhamsaboo/awesome-llm-apps/pull/787 **Author:** [@Ggboykxz](https://github.com/Ggboykxz) **Created:** 5/8/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `fix/audit-security-and-quality-issues` --- ### 📝 Commits (3) - [`5f5b778`](https://github.com/Shubhamsaboo/awesome-llm-apps/commit/5f5b7784cdda1b05721ef06345cd0f66bc239b95) fix: resolve security vulnerabilities and code quality issues - [`8d9a697`](https://github.com/Shubhamsaboo/awesome-llm-apps/commit/8d9a6978d90f3f9c2497b17c3acc68f81ece1dd0) fix: migrate AutoGen to ag2, fix langchain imports, and update dependencies - [`394b034`](https://github.com/Shubhamsaboo/awesome-llm-apps/commit/394b03420ca66958dbcc84d156ae9ec73ed885a6) test: add functional tests for all security and quality fixes ### 📊 Changes **34 files changed** (+663 additions, -538 deletions) <details> <summary>View changed files</summary> 📝 `.gitignore` (+40 -4) 📝 `advanced_ai_agents/autonomous_game_playing_agent_apps/ai_chess_agent/ai_chess_agent.py` (+81 -113) 📝 `advanced_ai_agents/autonomous_game_playing_agent_apps/ai_chess_agent/requirements.txt` (+1 -1) 📝 `advanced_ai_agents/multi_agent_apps/agent_teams/ai_competitor_intelligence_agent_team/requirements.txt` (+1 -1) 📝 `advanced_ai_agents/multi_agent_apps/agent_teams/ai_game_design_agent_team/game_design_agent_team.py` (+91 -188) 📝 `advanced_ai_agents/multi_agent_apps/agent_teams/ai_real_estate_agent_team/ai_real_estate_agent_team.py` (+1 -1) 📝 `advanced_ai_agents/multi_agent_apps/agent_teams/ai_real_estate_agent_team/local_ai_real_estate_agent_team.py` (+1 -1) 📝 `advanced_ai_agents/multi_agent_apps/agent_teams/multimodal_coding_agent_team/ai_coding_agent_o3.py` (+4 -4) 📝 `advanced_ai_agents/multi_agent_apps/agent_teams/multimodal_design_agent_team/requirements.txt` (+1 -1) 📝 `advanced_ai_agents/multi_agent_apps/ai_financial_coach_agent/ai_financial_coach_agent.py` (+4 -4) 📝 `advanced_ai_agents/multi_agent_apps/ai_mental_wellbeing_agent/ai_mental_wellbeing_agent.py` (+71 -136) 📝 `advanced_ai_agents/multi_agent_apps/ai_mental_wellbeing_agent/requirements.txt` (+2 -4) 📝 `advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/integrations/slack/chat.py` (+1 -1) 📝 `advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/requirements.txt` (+1 -1) 📝 `advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/utils/get_articles.py` (+10 -8) 📝 `advanced_ai_agents/single_agent_apps/ai_recipe_meal_planning_agent/ai_recipe_meal_planning_agent.py` (+4 -2) 📝 `advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/agent/prompt/service.py` (+1 -1) 📝 `advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/agent/registry/service.py` (+1 -1) 📝 `advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/agent/tools/service.py` (+1 -1) 📝 `advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/tree/__init__.py` (+1 -1) _...and 14 more files_ </details> ### 📄 Description ## Summary This PR fixes critical security vulnerabilities and code quality issues found during a comprehensive audit of the codebase. ### Security Fixes - **CRITIQUE**: Removed hardcoded API keys in 3 files (replaced with environment variables) - **HAUTE**: Fixed SQL injection vulnerability in `get_articles.py` using parameterized queries - **HAUTE**: Fixed deprecated OpenAI API import pattern ### Code Quality Fixes - Fixed typo: renamed `mutimodal_agent.py` to `multimodal_agent.py` - Fixed bare `except:` clauses in 7 files (now uses specific exception handling) - Improved `.gitignore` completeness ### Files Changed 1. `starter_ai_agents/multimodal_ai_agent/mutimodal_agent.py` - renamed to `multimodal_agent.py` 2. `advanced_llm_apps/cursor_ai_experiments/local_chatgpt_clone/chatgpt_clone_llama3.py` - hardcoded API key fixed 3. `advanced_llm_apps/llm_apps_with_memory_tutorials/llama3_stateful_chat/local_llama3_chat.py` - hardcoded API key fixed 4. `advanced_llm_apps/cursor_ai_experiments/llm_router_app/llm_router.py` - hardcoded API keys fixed 5. `advanced_ai_agents/single_agent_apps/windows_use_autonomous_agent/windows_use/tree/__init__.py` - bare except fixed 6. `advanced_ai_agents/single_agent_apps/ai_recipe_meal_planning_agent/ai_recipe_meal_planning_agent.py` - bare except fixed (2 occurrences) 7. `advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/integrations/slack/chat.py` - bare except fixed 8. `advanced_ai_agents/multi_agent_apps/ai_financial_coach_agent/ai_financial_coach_agent.py` - bare except fixed (2 occurrences) 9. `advanced_ai_agents/multi_agent_apps/agent_teams/multimodal_coding_agent_team/ai_coding_agent_o3.py` - bare except fixed (4 occurrences) 10. `advanced_ai_agents/multi_agent_apps/agent_teams/ai_real_estate_agent_team/local_ai_real_estate_agent_team.py` - bare except fixed 11. `advanced_ai_agents/multi_agent_apps/agent_teams/ai_real_estate_agent_team/ai_real_estate_agent_team.py` - bare except fixed 12. `advanced_ai_agents/multi_agent_apps/ai_news_and_podcast_agents/beifong/utils/get_articles.py` - SQL injection + deprecated API fixed 13. `.gitignore` - improved completeness --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-05-17 05:44:26 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/awesome-llm-apps#5809