pw-client
Verified Safeby viraj-sh
Overview
A dashboard application for students to access, view, and download course resources (notes, DPPs) from their Physics Wallah (PW) batches.
Installation
streamlit run streamlit.pySecurity Notes
The application hardcodes API client credentials (CLIENT_ID, CLIENT_SECRET, ORGANIZATION_ID) within the source code (`core/utils.py`, `core/generate_token.py`), which is generally not recommended for secrets and could pose a risk if these are meant to be unique or confidential per deployment. User session tokens are stored in plain text locally in `data/token.txt`, making them vulnerable to local file system access. There are no immediate signs of 'eval', obfuscation, or other actively malicious patterns in the provided code. Network requests use timeouts, which is good practice.
Similar Servers
matchmaker
A web application for searching scientific datasets and deploying analyses using natural language queries, powered by AI.
streamlit_mcp_cortex
This repository provides Streamlit applications designed to serve as a dashboard or management interface for an MCP Cortex system, potentially involving metric visualization and network configuration.
mcp_server_sample
Provides a backend API for managing school-related data, likely serving information stored in a SQLite database.
Ai-Job-hunting-Agent
Multi-agent system for real-time job discovery, resume analysis, and job matching, designed to assist candidates in their job search.