llm-scanner 0.1.3 → 0.1.4

package/README.md

@@ -16,16 +16,29 @@ npm install -g llm-scanner
 
 **Step 2 — Add your OpenAI key**
 
-llm-scanner uses OpenAI internally to judge whether your AI passed or 
-failed each attack. Create a .env file in the folder you run scans from:
+Get your API key from https://platform.openai.com/api-keys
+
+llm-scanner uses a separate AI judge to evaluate whether your AI
+passed or failed each attack. This judge runs on your machine using
+your own OpenAI API key — so your endpoint data never leaves your
+environment.
+
+This is what powers the PASS/FAIL results in your report.
+
+Option 1 — Save it (recommended):
 ```bash
 echo 'OPENAI_API_KEY=sk-your-key-here' > .env
 ```
-Or export it directly:
+
+Option 2 — Quick test:
 ```bash
 export OPENAI_API_KEY=sk-your-key-here
 ```
 
+If you use export, make sure you run aisec in the same terminal session.
+
+> Note: The judge uses gpt-4o-mini. A full scan costs less than $0.02.
+
 **Step 3 — Run your first scan**
 ```bash
 aisec scan \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-scanner",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Scan your AI app for prompt injection vulnerabilities before hackers do",
   "main": "./dist/index.js",
   "bin": {