static audit · 2026-10-26T03:54:06.446Z

khoj-ai/khoj

120 source files scanned · 11 LLM call site(s) · ~0% of LLM spend looks recoverable (static heuristics · repo looks like a library)

Library/SDK layout detected (installable Python package with src/ layout and no app entry point): call sites are most likely pass-through wrappers where the caller chooses the model and prompt, so findings are downgraded one level and the estimate is discounted.

badge   ![TokenZero audit](https://tokenzero.sh/v1/badge/audit/aud_yNHMVsMnLHFi_6HEi0knGw.svg)

repo badge   [![LLM spend audited by TokenZero](https://tokenzero.sh/v1/badge/repo/khoj-ai/khoj.svg)](https://tokenzero.sh/audit/khoj-ai/khoj)

Models referenced

gemini-3 ×1

Findings

SeverityWhereFindingEst.
infosrc/khoj/processor/image/generate.py:336Unrecognised model id "gemini-3"
Not in the current pricing table: it may be retired or renamed. Retired models return errors or are silently remapped by some providers.
Fix: Check the provider model list; TokenZero flags unpriced models in `X-TokenZero-Warning`.
0%

Fix all of it with one line

OPENAI_BASE_URL=https://tokenzero.sh/v1
ANTHROPIC_BASE_URL=https://tokenzero.sh

Keys pass through untouched. Cache formatting and exact caching are on by default; cascade routing stays opt-in. How it works