Build a repository insights UI that shows a repo's description, current version, and known vulnerabilities using GitHub GraphQL and REST APIs, with an LLM helping where raw API data is incomplete or messy. Explain how you would combine deterministic API reads with structured extraction, how you would handle ambiguous evidence, and how you would evaluate correctness and safety before shipping.
Agent design over a narrow tool setStructured extraction from README, releases, and manifestsEval-first thinking for field accuracy and abstentionPrompt injection handling from untrusted repository content