by pyrate-llama
A command center for an AI agent — chat, steer, browse files, manage skills — packed into one glassmorphic HTML app.
HTML 69% · Python 30.8% · JavaScript 0.2%
Is it a true single-file web app?
✗ No, this is not a single-file web app. It needs 8 files from elsewhere.
– Contacts
cdnjs.cloudflare.com– Contacts
fonts.googleapis.com– Contacts
fonts.gstatic.comHow to fix it
→ Inline
react.production.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
react-dom.production.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
babel.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
marked.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
highlight.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
github-dark.min.css into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Self-host the webfont as a base64
@font-face, or fall back to a system font stack (currently fonts.googleapis.com)→ Self-host the webfont as a base64
@font-face, or fall back to a system font stack (currently fonts.gstatic.com)Security audit — full results 8/9
✓ No leaked credentials (detect-secrets)
✗ Semgrep security-audit ruleset — 502 finding(s)
✓ Semgrep javascript ruleset
✓ eval() usage
✓ Function() construction
✓ decode→eval chain
✓ document.write of decoded content
✓ sendBeacon usage
✓ decoded content DOM injection
Embed this badge
