Cyberkryption cyberkryption

CLAUDE.md — CyberFeed Security Review

Two-pass security review for github.com/cyberkryption/cyberfeed. A cybersecurity RSS aggregator: Go backend fetching 19 concurrent feeds, React + Mantine frontend, served as a single static binary.

Do not make any code changes during this review. Do not commit anything. Read and report only.

Anti-patterns reference (load before starting either pass):

CLAUDE.md

Behavioral guidelines to reduce common LLM coding mistakes. Merge with project-specific instructions as needed.

Tradeoff: These guidelines bias toward caution over speed. For trivial tasks, use judgment.

1. Think Before Coding

Don't assume. Don't hide confusion. Surface tradeoffs.

Keybase proof

I hereby claim:

I am cyberkryption on github.
I am cyberkryption (https://keybase.io/cyberkryption) on keybase.
I have a public key whose fingerprint is A67E 6869 4C85 BB0E AFA4 0FCA 4A47 D186 36BD E4C9

To claim this, I am signing this object:

	#!/usr/bin/env bash
	# setup-dev-env.sh
	# Installs VS Code, Go 1.26.3, golangci-lint, Go dev tools,
	# Node.js 22 (Maintenance LTS), and npm on Debian 13 (Trixie)
	# Usage: chmod +x setup-dev-env.sh && ./setup-dev-env.sh

	set -euo pipefail

	GO_VERSION="1.26.3"
	GO_TARBALL="go${GO_VERSION}.linux-amd64.tar.gz"

	#!/bin/bash

	echo "[+] Checking for root permissions"
	if [ "$EUID" -ne 0 ];then
	echo "Please run this script as root"
	exit 1
	fi

	echo "[+] Seeting needrestart to automatic to prevent restart pop ups"
	sudo sed -i 's/#$nrconf{restart} = '"'"'i'"'"';/$nrconf{restart} = '"'"'a'"'"';/g' /etc/needrestart/needrestart.conf

	#!/bin/bash

	echo "[+] Checking for root permissions"
	if [ "$EUID" -ne 0 ];then
	echo "Please run this script as root"
	exit 1
	fi

	echo "[+] Seeting needrestart to automatic to prevent restart pop ups"
	sudo sed -i 's/#$nrconf{restart} = '"'"'i'"'"';/$nrconf{restart} = '"'"'a'"'"';/g' /etc/needrestart/needrestart.conf

	#!/bin/bash
	clear

	# shameless taken from @g0tmilk kali os-scripts
	#### (Cosmetic) Colour output
	RED="\033[01;31m" # Issues/Errors
	GREEN="\033[01;32m" # Success
	YELLOW="\033[01;33m" # Warnings/Information
	BLUE="\033[01;34m" # Heading
	BOLD="\033[01;01m" # Highlight

	# CLAUDE.md

	Behavioral guidelines to reduce common LLM coding mistakes. Merge with project-specific instructions as needed.

	Tradeoff: These guidelines bias toward caution over speed. For trivial tasks, use judgment.

	## 1. Think Before Coding

	Don't assume. Don't hide confusion. Surface tradeoffs.