Back to Home
The-AI-Alliance icon

gofannon

by The-AI-Alliance

Overview

Rapidly prototype AI agents and web UIs, build conversational flows, preview interactions, and deploy agent-driven experiences.

Installation

Run Command
cd gofannon/webapp/infra/docker && docker-compose up --build

Environment Variables

  • OPENAI_API_KEY
  • ANTHROPIC_API_KEY
  • GEMINI_API_KEY
  • COUCHDB_URL
  • COUCHDB_USER
  • COUCHDB_PASSWORD
  • AWS_ACCESS_KEY_ID
  • AWS_SECRET_ACCESS_KEY
  • AWS_DEFAULT_REGION
  • S3_ENDPOINT_URL
  • S3_BUCKET_NAME
  • DATABASE_PROVIDER
  • DYNAMODB_REGION
  • DYNAMODB_ENDPOINT_URL
  • GCP_PROJECT_ID
  • CLOUDWATCH_LOG_GROUP_NAME
  • APP_ENV
  • STORAGE_PROVIDER
  • ADMIN_PANEL_ENABLED
  • ADMIN_PANEL_PASSWORD
  • APP_ROUTER_CONFIG
  • FRONTEND_URL

Security Notes

The system features explicit execution of user-provided or LLM-generated Python code via the `exec` function within a 'sandboxed environment'. This is a critical security vulnerability, as `exec` is notoriously difficult to secure against malicious code, potentially allowing arbitrary code execution, compromise of the host system, or data exfiltration. The sandboxed code also has access to network clients (`httpx.AsyncClient`, `RemoteMCPClient`, `GofannonClient`) enabling arbitrary network requests, which amplifies the risk of Server-Side Request Forgery (SSRF) and data exfiltration. Furthermore, hardcoded default passwords (e.g., 'password' for admin panel, 'minioadmin' for MinIO, 'admin:password' for CouchDB) are present in configuration files, posing significant vulnerabilities if not explicitly changed in production environments.

Similar Servers

Stats

Interest Score46
Security Score2
Cost ClassHigh
Avg Tokens2000
Stars61
Forks18
Last Update2026-01-16

Tags

AI AgentsWeb UIPrototypingLLMDevelopment Tools