[ralyodio]

Adds the Profullstack webring footer links per the 2026-10-10 ring spec: a Random (⚄) hop alongside << / >>, with from= set to the site's canonical homepage.

🤖 Generated with Claude Code

[github-actions]

ThreatCrush Security Scan

52 finding(s)

HIGH/CRITICAL: 3 | MEDIUM: 28 | LOW: 21

Severity	Rule	Location
HIGH	py-ssrf-outbound-request	apps/desktop/launcher/tron-tor-helper:303
HIGH	py-ssrf-outbound-request	apps/desktop/launcher/tron-tor-helper:437
HIGH	sh-remote-script-execution	apps/web/public/install.sh:882
MEDIUM	js-open-redirect	apps/desktop/extensions/ai-sidebar/install-helper.js:156
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/media.js:34
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/media.js:57
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/newtab.js:237
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/newtab.js:266
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/newtab.js:336
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/options.js:306
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/sidepanel.js:78
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/sidepanel.js:166
MEDIUM	js-unescaped-html-sink	apps/extensions/public/store.js:77
MEDIUM	js-unescaped-html-sink	apps/extensions/public/store.js:227
MEDIUM	js-unescaped-html-sink	apps/extensions/public/store.js:569
MEDIUM	js-unescaped-html-sink	apps/web/public/app.js:29
MEDIUM	js-unescaped-html-sink	apps/web/public/dns.js:54
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:167
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:172
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:407
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:425
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:938
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:989
MEDIUM	js-unescaped-html-sink	apps/web/public/settings.js:96
MEDIUM	js-unescaped-html-sink	apps/web/public/settings.js:168
MEDIUM	js-dynamic-code-execution	packages/sdk/src/mcp/tools.ts:125
MEDIUM	js-dynamic-code-execution	packages/sdk/src/page.ts:68
MEDIUM	js-dynamic-code-execution	packages/sdk/src/page.ts:73
MEDIUM	sql-template-interpolation	services/api/src/store/db.ts:116
MEDIUM	js-dynamic-code-execution	services/api/src/store/scanner.ts:44
MEDIUM	sh-predictable-temp-path	start.sh:25
LOW	js-dynamic-code-execution	apps/desktop/extensions/ai-sidebar/pit-proxy.test.js:8
LOW	js-dynamic-code-execution	packages/agent-runtime/src/analyze/form-script.test.ts:6
LOW	js-unescaped-html-sink	packages/agent-runtime/src/analyze/form-script.test.ts:26
LOW	js-unescaped-html-sink	packages/agent-runtime/src/analyze/form-script.test.ts:49
LOW	js-dynamic-code-execution	packages/browser-core/src/automation/extract-script.test.ts:6
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:16
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:45
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:57
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:80
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:99
LOW	js-dynamic-code-execution	packages/browser-core/src/automation/snapshot-script.test.ts:11
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/snapshot-script.test.ts:62
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/snapshot-script.test.ts:101
LOW	js-unescaped-html-sink	packages/provenance/src/scan.test.ts:47
LOW	js-unescaped-html-sink	packages/provenance/src/scan.test.ts:170
LOW	js-unescaped-html-sink	packages/provenance/src/scan.test.ts:216
LOW	js-dynamic-code-execution	packages/sdk/src/mcp/automate.test.ts:261
LOW	secret-generic-api-key	packages/storage/src/config.ts:51
LOW	secret-generic-credential	packages/storage/src/config.ts:51

…and 2 more. Full results in the Security tab.

Snippets are redacted; ThreatCrush never prints matched credential material.