Apps on Base44 and Manus hide LLM calls behind SDK wrappers, evading code analyzers

EmuAfter5933 · reddit · 2026-11-16

A team auditing a GitHub AI-work analyzer found a blind spot: a hackathon app doing real LLM engineering — vision-LLM OCR of government documents into a JSON schema, structured-output case routing, and RAG answer building — scored near zero on NLP/LLMs.

The cause: all model calls went through base44.integrations.Core.InvokeLLM(...) with no openai import or provider SDK, so pattern matching saw "no LLM". Manus's invokeLLM and homemade helpers like callClaude() trigger the same issue. Fixes shipped: recognize model call names inside identifiers, and tell the judge explicitly that these are model API calls. They ask the community how others detect model usage when the provider is abstracted away.

Original post →

More from coding & agent

coding & agent channel →