{
  "format": "audeep.report.v1",
  "exportedAt": "2026-09-13T19:08:19.654Z",
  "report": {
    "schemaVersion": 2,
    "contract": {
      "productUnderstanding": {
        "source": "surface-observation",
        "productName": null,
        "productCategory": "unknown",
        "summary": "This report used the audited public surface without paid discovery context.",
        "capabilities": [],
        "authSignals": [],
        "publicPaths": [],
        "apiOrigins": [],
        "discovery": null
      },
      "coverage": {
        "accessMode": "public",
        "status": "complete",
        "renderedPages": 1,
        "targetRequests": 53,
        "pageBudget": 1,
        "targetRequestBudget": 80,
        "discoveredPublicPathCount": 0,
        "allowedApiOriginCount": 0,
        "syntheticSignupCompleted": false,
        "postSignupTargetWrites": 0
      },
      "observedActions": [],
      "safeStops": [],
      "cleanupResidue": {
        "status": "not-required",
        "summary": "No synthetic account or target records were created by this audit.",
        "residue": []
      },
      "findingVerification": [
        {
          "findingId": "f2a05058-9d89-4788-a048-109afa10edd6-exposed-secret-0",
          "status": "evidence-backed",
          "evidenceKinds": [
            "dom-selector",
            "request"
          ],
          "summary": "The finding is tied to evidence captured during this audit."
        },
        {
          "findingId": "f2a05058-9d89-4788-a048-109afa10edd6-wcag-control-name-1",
          "status": "evidence-backed",
          "evidenceKinds": [
            "screenshot",
            "dom-selector"
          ],
          "summary": "The finding is tied to evidence captured during this audit."
        },
        {
          "findingId": "f2a05058-9d89-4788-a048-109afa10edd6-ux-viewport-overflow-2",
          "status": "evidence-backed",
          "evidenceKinds": [
            "screenshot",
            "dom-selector"
          ],
          "summary": "The finding is tied to evidence captured during this audit."
        }
      ]
    },
    "id": "f2a05058-9d89-4788-a048-109afa10edd6",
    "tier": "quick",
    "url": "https://hider.sh/",
    "finalUrl": "https://hider.sh/create/text/",
    "auditedAt": "2026-08-22T15:17:20.553Z",
    "score": 24,
    "grade": "F",
    "dimensions": [
      {
        "class": "functional",
        "findings": 0,
        "covered": true,
        "score": 100,
        "grade": "A"
      },
      {
        "class": "security",
        "findings": 1,
        "covered": true,
        "score": 65,
        "grade": "D"
      },
      {
        "class": "accessibility",
        "findings": 1,
        "covered": true,
        "score": 88,
        "grade": "C"
      },
      {
        "class": "ux",
        "findings": 17,
        "covered": true,
        "score": 74,
        "grade": "C"
      },
      {
        "class": "performance",
        "findings": 1,
        "covered": true,
        "score": 99,
        "grade": "A"
      },
      {
        "class": "seo",
        "findings": 1,
        "covered": true,
        "score": 96,
        "grade": "B"
      },
      {
        "class": "design",
        "findings": 2,
        "covered": true,
        "score": 98,
        "grade": "A"
      }
    ],
    "totalFindings": 23,
    "otherFindings": 22,
    "headline": {
      "id": "f2a05058-9d89-4788-a048-109afa10edd6-exposed-secret-0",
      "type": "exposed-secret",
      "class": "security",
      "severity": "critical",
      "confidence": "confirmed",
      "title": "Stripe live secret key appears in client-side code",
      "detail": "sk_live_•••• was found in JavaScript loaded by the audited page.",
      "evidence": {
        "selector": "script[src=\"/_next/static/chunks/2q6d2hk_8zlk_.js\"]",
        "request": {
          "method": "GET",
          "url": "https://hider.sh/_next/static/chunks/2q6d2hk_8zlk_.js",
          "status": 200,
          "snippet": "(globalThis.TURBOPACK||(globalThis.TURBOPACK= [redacted]\"object\"==typeof document?document.currentScript:void 0,32919,e=>{\"use strict\";var t= [redacted],r= [redacted],n= [redacted],o=",
          "line": 1
        },
        "screenshot": null,
        "prominence": 0
      },
      "page": "https://hider.sh/create/text/",
      "firstSeen": 0,
      "evidenceChip": "GET /_next/static/chunks/2q6d2hk_8zlk_.js:1 -> 200"
    },
    "evidenceChip": "GET /_next/static/chunks/2q6d2hk_8zlk_.js:1 -> 200",
    "findings": [
      {
        "id": "f2a05058-9d89-4788-a048-109afa10edd6-exposed-secret-0",
        "type": "exposed-secret",
        "class": "security",
        "severity": "critical",
        "confidence": "confirmed",
        "title": "Stripe live secret key appears in client-side code",
        "detail": "sk_live_•••• was found in JavaScript loaded by the audited page.",
        "evidence": {
          "selector": "script[src=\"/_next/static/chunks/2q6d2hk_8zlk_.js\"]",
          "request": {
            "method": "GET",
            "url": "https://hider.sh/_next/static/chunks/2q6d2hk_8zlk_.js",
            "status": 200,
            "snippet": "(globalThis.TURBOPACK||(globalThis.TURBOPACK= [redacted]\"object\"==typeof document?document.currentScript:void 0,32919,e=>{\"use strict\";var t= [redacted],r= [redacted],n= [redacted],o=",
            "line": 1
          },
          "screenshot": null,
          "prominence": 0
        },
        "page": "https://hider.sh/create/text/",
        "firstSeen": 0,
        "evidenceChip": "GET /_next/static/chunks/2q6d2hk_8zlk_.js:1 -> 200"
      },
      {
        "id": "f2a05058-9d89-4788-a048-109afa10edd6-wcag-control-name-1",
        "type": "wcag-control-name",
        "class": "accessibility",
        "severity": "high",
        "confidence": "confirmed",
        "title": "Interactive control has no accessible name",
        "detail": "A visible textarea has no text, label, title, or ARIA name.",
        "evidence": {
          "selector": "html > body:nth-of-type(1) > div:nth-of-type(2) > div:nth-of-type(2) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(2) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > textarea:nth-of-type(1)",
          "request": null,
          "screenshot": "/audit-artifacts/f2a05058-9d89-4788-a048-109afa10edd6/page.png",
          "prominence": 0.04611979166666667
        },
        "page": "https://hider.sh/create/text/",
        "firstSeen": 1,
        "evidenceChip": "html > body:nth-of-type(1) > div:nth-of-type(2) > div:nth-of-type(2) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(2) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > textarea:nth-of-type(1)"
      },
      {
        "id": "f2a05058-9d89-4788-a048-109afa10edd6-ux-viewport-overflow-2",
        "type": "ux-viewport-overflow",
        "class": "ux",
        "severity": "medium",
        "confidence": "confirmed",
        "title": "Content is clipped at the mobile viewport edge",
        "detail": "At 375px wide, content runs 66px past the viewport and is cut off by an ancestor's overflow:hidden.",
        "evidence": {
          "selector": "html > body:nth-of-type(1) > div:nth-of-type(2) > div:nth-of-type(2) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(2) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > span:nth-of-type(3) > span:nth-of-type(3)",
          "request": null,
          "screenshot": "/audit-artifacts/f2a05058-9d89-4788-a048-109afa10edd6/page.png",
          "prominence": 0.0007801099450274862
        },
        "page": "https://hider.sh/create/text/",
        "firstSeen": 2,
        "evidenceChip": "html > body:nth-of-type(1) > div:nth-of-type(2) > div:nth-of-type(2) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(2) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > div:nth-of-type(1) > span:nth-of-type(3) > span:nth-of-type(3)"
      }
    ],
    "severityCounts": {
      "critical": 1,
      "high": 1,
      "medium": 16,
      "low": 5
    },
    "interceptSummary": {
      "totalRequests": 53,
      "targetRequests": 53,
      "targetMethods": [
        "GET"
      ],
      "methodCounts": {
        "GET": 53
      },
      "nonGetToTargetAllowed": 0,
      "nonGetToTargetBlocked": 0,
      "audeepAuthoredThirdParty": 0,
      "observeOnlyPass": true,
      "renderedPages": 1,
      "followInternalLinks": false
    },
    "displayHost": "hider.sh",
    "displayUrl": "hider.sh",
    "metaTitle": "Grade F - hider.sh",
    "metaDescription": "Stripe live secret key appears in client-side code - +22 other issues found. Observe-only audit by Audeep.",
    "shareText": "My site scored F on Audeep: Stripe live secret key appears in client-side code",
    "pageScreenshot": "/audit-artifacts/f2a05058-9d89-4788-a048-109afa10edd6/page.png"
  }
}