{"root_cid":"bafybeic5icomycnns3layg3ihdeejxrdtgv2aixra4qf24wwgqwcqqw27y","model":"openai/gpt-5.4-mini","analyzed_at":"2026-05-05T15:21:14.386Z","result":{"schema_version":1,"category":"Security","category_confidence":0.81,"summary":"A React-based registry for verified decentralized frontends.","signals":["analysis-context.json: latest_probe.title is \"Immutable Frontends\" and content_type is \"text/html\" for the mounted root","root/index.html: meta description says \"A registry for verified decentralized frontends\" and author is \"Kleros\"","root/assets/index-juiWBAzc.js: GraphQL query `GetFrontends` filters `litems` by `registry: \"0xda03509bb770061a61615ad8fc8e1858520ebd86\"`, indicating a frontend registry listing app","root/index.html: loads `https://cdn.gpteng.co/gptengineer.js` as a module script"],"quality":{"tier":"good","score":0.76,"is_substantive":true,"is_redirect_only":false,"is_placeholder":false,"rationale":"The mounted root contains a functional single-page app with a clear registry purpose and real data-fetching logic, though the bundle is thin and includes a third-party module script."},"security":{"risk":"medium","risk_score":0.41,"threat_type":"suspicious_external_script","safe_to_list":true,"findings":[{"type":"suspicious_external_script","severity":"medium","confidence":0.97,"evidence":"root/index.html line 23: `<script src=\"https://cdn.gpteng.co/gptengineer.js\" type=\"module\"></script>` loads remote executable code from a third-party CDN.","file":"root/index.html"}]},"files_reviewed":["analysis-context.json","root/index.html","root/assets/index-juiWBAzc.js","root/assets/index-D4XdiwLK.css"]}}