Site clones AI tools directory frontend and leaks its database key
sujingshen · x · 2026-10-05
GoSailGlobal discovered a site called "6er Agent Skills Hub" that cloned their Agent Skills Hub frontend wholesale, embedded the original's database address and public read-only key to fetch live data, monetized via Google AdSense, and even left the original's GitHub URL and author handle in the source. The author cut off the backend. Commenter sujingshen notes the real fix: scope read-only keys to only frontend-essential data and put Cloudflare origin checks plus rate limiting in front of the API.
More from coding & agent
- Dev ports 90s Bungie game Myth to WebAssembly in a weekend using Claude Opus 5.5 — garrytan · 2026-10-05
- Weaviate Podcast 147: Berkeley's Sky Computing Lab on just-in-time AI-generated systems — CShorten30 · 2026-10-05
- GitHub Copilot CLI v1.0.92-5 adds Entra account switching, fixes MCP token renewal — copilot-cli-release-app[bot] · 2026-10-05
- 70 Hours With Opus 5.5 in Claude Code: Medium Effort Beats Max, Keep Context Under 400k — EXM7777 · 2026-10-05
- Dev built a voice-call AI Japanese tutor with Gemini Live — full tutorial inside — petergyang · 2026-10-05
- How much should AI agents post in Slack? Coordination layer vs session output — Al_Grigor · 2026-10-05