
Security News
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.
@elliot-labs/chat-engine
Advanced tools
An extendable LLM Harness designed for OpenAI-compatible LLM hosts. This engine allows you to extend the core capabilities of a chat model through a robust, type-safe plugin architecture, supporting advanced features like Retrieval Augmented Generation (RAG) and Role-Based Access Control (RBAC).
ChatEnginePlugin. Plugins can define custom tools, parameters, and required permissions.requiredPermissionList for each plugin, ensuring users only access tools they are authorized to use.Install the package via npm:
npm install @elliot-labs/chat-engine
import { ChatEngine } from '@elliot-labs/chat-engine';
const chatConfig = {
host: 'https://your-openai-compatible-host.com/v1',
model: 'gpt-4',
authentication: 'your-api-key'
};
const engine = new ChatEngine(chatConfig);
// Register a plugin (e.g., the built-in DateTime utility)
// engine.registerPlugin(getDateTime);
async function chat(message: string) {
const metadata = {
userId: 'user-123',
tenantId: 'tenant-456',
permissionList: ['date-access']
};
const response = await engine.invokeLanguageModel(message, metadata);
console.log(response);
}
chat("What time is it?");
Creating a plugin is straightforward using the ChatEnginePlugin class. You define a callback function that executes when the LLM requests the tool, along with a JSON schema configuration for the parameters.
import { ChatEnginePlugin } from '@elliot-labs/chat-engine';
export const myPlugin = new ChatEnginePlugin({
id: 'your-uuid-here',
callback: async (common, args) => {
// Logic goes here
return "Result from plugin";
},
configuration: {
name: 'your-uuid-here',
description: 'A description for the LLMTool',
parameters: { /* JSON Schema */ },
type: 'function'
},
group: myGroup,
});
To contribute to this project or work on it locally, follow these steps:
Prerequisites: Ensure you have Node.js (>=24.18.0) and npm installed.
Open in VS Code: This project includes a pre-configured workspace file. Open the project using:
code "Chat Engine.code-workspace"
Note: The recommended extensions and settings are already included in this workspace file.
Install Dependencies:
npm install
Security Recommendation: We highly recommend using Socket Firewall when developing to reduce the risk of supply chain malware during the dependency installation process.
This project is built with a security-first mindset:
TokenCredential (Azure Identity) for secure authentication.FAQs
Extendable engine used to interact with LLMs.
We found that @elliot-labs/chat-engine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.