Skip to content

feat: WebMCP tools via @profullstack/webmcp - #150

Merged
ralyodio merged 1 commit into
masterfrom
feat/webmcp
Nov 11, 2026
Merged

ralyodio merged 1 commit into
masterfrom
feat/webmcp

Conversation

@ralyodio

Copy link
Copy Markdown
Collaborator

Adds the @profullstack/webmcp embed to app/layout.tsx (site_info, open_page over pit, videos, badges, dashboard, sign-up) for in-browser AI agents. The CSP only sets frame-ancestors, so no script-src change. No-op where the browser has no WebMCP.

🤖 Generated with Claude Code

Adds @profullstack/webmcp so in-browser AI agents get the site's tools.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

30 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 26 | LOW: 2

Severity Rule Location
HIGH sh-remote-script-execution public/install.sh:365
HIGH js-ssrf-outbound-request public/sw.js:5
MEDIUM js-open-redirect app/dashboard/[[...tab]]/page.tsx:68
MEDIUM js-open-redirect app/signup/page.tsx:51
MEDIUM js-unescaped-html-sink components/PitFooter.tsx:30
MEDIUM js-open-redirect components/PitSearch.tsx:118
MEDIUM js-unescaped-html-sink components/Tenant.tsx:30
MEDIUM js-unescaped-html-sink components/Tenant.tsx:31
MEDIUM js-unescaped-html-sink components/Tenant.tsx:79
MEDIUM js-unescaped-html-sink components/Tenant.tsx:155
MEDIUM sql-template-interpolation lib/db.ts:592
MEDIUM sql-template-interpolation lib/db.ts:1310
MEDIUM redos-nested-quantifier lib/markdown.ts:109
MEDIUM sql-template-interpolation lib/webhook-store.ts:95
MEDIUM sql-template-interpolation lib/webhook-store.ts:102
MEDIUM sql-template-interpolation lib/webhook-store.ts:108
MEDIUM sql-template-interpolation lib/webhook-store.ts:111
MEDIUM sql-template-interpolation lib/webhook-store.ts:116
MEDIUM sql-template-interpolation lib/webhook-store.ts:117
MEDIUM sql-template-interpolation lib/webhook-store.ts:121
MEDIUM sql-template-interpolation lib/webhook-store.ts:128
MEDIUM sql-template-interpolation lib/webhook-store.ts:133
MEDIUM sql-template-interpolation lib/webhook-store.ts:144
MEDIUM sql-template-interpolation lib/webhook-store.ts:154
MEDIUM sql-template-interpolation lib/webhooks.ts:207
MEDIUM sh-remote-script-execution public/install.sh:124
MEDIUM sh-remote-script-execution public/install.sh:128
MEDIUM sh-remote-script-execution public/install.sh:147
LOW secret-generic-credential tests/signup-profile.test.mjs:28
LOW secret-generic-credential tests/signup-profile.test.mjs:39

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit d0da496 into master Nov 11, 2026
5 checks passed
@ralyodio
ralyodio deleted the feat/webmcp branch November 11, 2026 08:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant