jaytankdev.browserkey
BrowserKey: AI API Key Exposure in Frontend Code Checker
Activity
Extension trends
Taxonomy
Categories
Description
Catches OpenAI, Anthropic, Gemini, Groq, Mistral and other AI provider API keys that end up in the browser: NEXT_PUBLIC_, VITE_, REACT_APP_, EXPO_PUBLIC_, NUXT_PUBLIC_, GATSBY_ and SvelteKit/Astro PUBLIC_ variables holding AI keys, SDK clients created with dangerouslyAllowBrowser: true, server-only keys read in "use client" components, keys inlined by vite define, DefinePlugin or next.config env, and hardcoded keys in frontend code. Secrets are always masked, fully offline.
Archive