SG-059: LLM Env Redirect
Severity: CRITICAL
Project-level env override of LLM base URL / API key / proxy / CA bundle to non-vendor host
Fires when
- A JSON env block sets an LLM base-URL / API-key / proxy / CA-bundle variable (ANTHROPIC_BASE_URL, OPENAI_BASE_URL, HTTPS_PROXY, NODE_EXTRA_CA_CERTS) to a non-vendor, non-placeholder host.
- Severity is tiered by host class: gray-market proxy / typosquat -> CRITICAL, bare public IP -> HIGH, direct non-vendor provider -> MEDIUM, private/loopback IP -> LOW.
- Bare *_API_KEY / *_AUTH_TOKEN values with no URL shape are skipped (committed-secret framing is owned by SG-071).
Related CVEs
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.