[ralyodio]

Bakes @profullstack/footer 0.2.5 (built.indie badge) into the pre-rendered footer so built.indie's backlink check sees it.

🤖 Generated with Claude Code

[github-actions]

ThreatCrush Security Scan

48 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 25 | LOW: 21

Severity	Rule	Location
HIGH	py-ssrf-outbound-request	apps/desktop/launcher/tron-tor-helper:303
HIGH	py-ssrf-outbound-request	apps/desktop/launcher/tron-tor-helper:437
MEDIUM	js-open-redirect	apps/desktop/extensions/ai-sidebar/install-helper.js:156
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/media.js:34
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/media.js:57
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/newtab.js:239
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/newtab.js:268
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/newtab.js:338
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/options.js:306
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/sidepanel.js:78
MEDIUM	js-unescaped-html-sink	apps/desktop/extensions/ai-sidebar/sidepanel.js:166
MEDIUM	js-unescaped-html-sink	apps/extensions/public/store.js:77
MEDIUM	js-unescaped-html-sink	apps/extensions/public/store.js:227
MEDIUM	js-unescaped-html-sink	apps/extensions/public/store.js:569
MEDIUM	js-unescaped-html-sink	apps/web/public/app.js:29
MEDIUM	js-unescaped-html-sink	apps/web/public/dns.js:54
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:167
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:407
MEDIUM	sh-remote-script-execution	apps/web/public/install.sh:425
MEDIUM	js-unescaped-html-sink	apps/web/public/settings.js:96
MEDIUM	js-unescaped-html-sink	apps/web/public/settings.js:168
MEDIUM	js-dynamic-code-execution	packages/sdk/src/mcp/tools.ts:125
MEDIUM	js-dynamic-code-execution	packages/sdk/src/page.ts:68
MEDIUM	js-dynamic-code-execution	packages/sdk/src/page.ts:73
MEDIUM	sql-template-interpolation	services/api/src/store/db.ts:116
MEDIUM	js-dynamic-code-execution	services/api/src/store/scanner.ts:44
MEDIUM	sh-predictable-temp-path	start.sh:28
LOW	js-dynamic-code-execution	apps/desktop/extensions/ai-sidebar/pit-proxy.test.js:8
LOW	js-dynamic-code-execution	packages/agent-runtime/src/analyze/form-script.test.ts:6
LOW	js-unescaped-html-sink	packages/agent-runtime/src/analyze/form-script.test.ts:26
LOW	js-unescaped-html-sink	packages/agent-runtime/src/analyze/form-script.test.ts:49
LOW	js-dynamic-code-execution	packages/browser-core/src/automation/extract-script.test.ts:6
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:16
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:45
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:57
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:80
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/extract-script.test.ts:99
LOW	js-dynamic-code-execution	packages/browser-core/src/automation/snapshot-script.test.ts:11
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/snapshot-script.test.ts:62
LOW	js-unescaped-html-sink	packages/browser-core/src/automation/snapshot-script.test.ts:101
LOW	js-unescaped-html-sink	packages/provenance/src/scan.test.ts:47
LOW	js-unescaped-html-sink	packages/provenance/src/scan.test.ts:170
LOW	js-unescaped-html-sink	packages/provenance/src/scan.test.ts:216
LOW	js-dynamic-code-execution	packages/sdk/src/mcp/automate.test.ts:261
LOW	secret-generic-api-key	packages/storage/src/config.ts:51
LOW	secret-generic-credential	packages/storage/src/config.ts:51
LOW	js-dynamic-code-execution	services/api/src/store/scanner.test.ts:32
LOW	js-hardcoded-crypto-key	services/api/src/store/signing.test.ts:24

Snippets are redacted; ThreatCrush never prints matched credential material.