{
  "lab": "secrets-check",
  "network": "none",
  "storage": "none",
  "input": "Text you paste and files you choose; they are read in the browser tab and never uploaded.",
  "statement": "This page sends nothing anywhere. If an AI agent or browser extension is reading your screen, it can see what's shown here.",
  "enforcedBy": "content-security-policy: connect-src 'self' (the browser blocks any request to another site)",
  "check": [
    "curl -sI https://lab.hopperlabs.ai/labs/secrets-check/run | grep -i content-security-policy",
    "Compare each file below with its sha256, and read the source at the commit given.",
    "Once the page has loaded, turn off Wi-Fi: the lab keeps working."
  ],
  "source": {
    "repository": "hopperlabs-ai-dev/hopper-lab",
    "commit": "fcb56962e61de9ef456ebdea32d13ab1fc56e882",
    "files": [
      {
        "path": "/secrets-check/app.js",
        "sha256": "6c802eb0a40c22ebba28b8f1c4325e220f3effa9e354c32a8b00d82d33c3b5a1"
      },
      {
        "path": "/secrets-check/chrome.css",
        "sha256": "abeaecb0b75fd9f80d6380f840ddadf1a76a1eaf9cd5bde90c9e69d785a73bb3"
      },
      {
        "path": "/secrets-check/gitleaks-rules.js",
        "sha256": "30017a84b169170d5da3707481e1326fe045a6fecb05c40be3d1b018d3dd5cdc"
      },
      {
        "path": "/secrets-check/index.html",
        "sha256": "43a91d1d6c545f23deeb758f38b1ed79d35b668d8461b646b0de093522816f22"
      },
      {
        "path": "/secrets-check/lab-kit.js",
        "sha256": "d6dd870a1b38a807637070750eb57d7d31c57b25541bd2a7f8dbab093e261407"
      },
      {
        "path": "/secrets-check/lab.css",
        "sha256": "1eec4d1b2fd9303609311aff39ebc2ad9ae201dd2e4515e8dc08e4860674d2c2"
      },
      {
        "path": "/secrets-check/scan-worker.js",
        "sha256": "93ba570646371071c433c9f5e723abbcb0b481e769ddd5b420021926b68b650c"
      },
      {
        "path": "/secrets-check/scan.js",
        "sha256": "e93898a3bc4d7bdc09423724e7f8ff3395eccd81c9ef5e4e8f0aca9d22d5e6f0"
      },
      {
        "path": "/secrets-check/vendor/gitleaks/LICENSE",
        "sha256": "e3884b252b3bfc045e55be43a34d1e80da070bc6f804ac95bf4660e97d62ebc6"
      },
      {
        "path": "/secrets-check/vendor/gitleaks/SOURCE.txt",
        "sha256": "301e2f9dd8f100e0eb4900f19e8687c73b2aa4e1d82dca822793c0e23c315976"
      }
    ]
  }
}