P1kaj1uu/ChattyPlay-Agent

🚀 告别多个App！本项目主要基于Python+React+TypeScript+Hono+SQLite3+Redis，打造“All in One”智能工具集。免会员破解爱奇艺、腾讯视频、优酷、抖音、B站、小红书等20+平台视频，支持4K在线解析与无水印高速下载。集成Cloudflare Turnstile防机器人和爬虫、Google、GitHub授权登录及OpenAI SDK、埋点SDK、MCP服务和Agent等，支持ChatGPT对话、AI绘画、论文降重、Hugging Face论文爬取、在线Latex编写；更有实时黄金K线、AI思维导图、闲鱼助手等效率黑科技。内置海量动漫漫画资源，畅享阅读！轻量高效，配置即用，完美适配PC与移动端，快来ChattyPlay开启奇妙之旅吧～

755 starsTypeScriptApache-2.0chatgptmusic-playerthree-jsvideo

SCANNED62/100

Scanned 2026-07-14 · gemini v1

Dimension breakdown

Security

68/100

3 findings

Quality

78/100

4 findings

License

75/100

2 findings

Completeness

15/100

5 findings

Findings (14)

CRITICAL: 2HIGH: 5MEDIUM: 4LOW: 2INFO: 1

CRITICALcompletenessMissing MCP SDK Dependency
CRITICALcompletenessMissing mcpName in package.json
HIGHsecurityPotential Zip Slip (Path Traversal) via Zip Extraction
HIGHsecurityPotential LaTeX Injection / Arbitrary File Read
HIGHlicenseCommercial Use Restriction Contradicts Apache-2.0 License

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/P1kaj1uu/ChattyPlay-Agent.svg)](https://archimedes.market/r/P1kaj1uu/ChattyPlay-Agent)

HTML

<a href="https://archimedes.market/r/P1kaj1uu/ChattyPlay-Agent"><img src="https://archimedes.market/api/badge/P1kaj1uu/ChattyPlay-Agent.svg" alt="Archimedes Trust Verified"/></a>