See also my same comment here, with more details on the actual code that is (not) visible to us.

@Manamama I've found the code that's running inside the Netlify function under the same developer here: https://github.com/liady/chatgpt-static/blob/main/netlify/functions/chatgpt-upload/chatgpt-upload.js

The code is harmless but we still don't know if this is the exact code running on Netlify and the function called inside the url.txt file could still be changed at any time by the owner. That being said, it's obvious to me that the developer has no malicious intentions, just look at all the other projects they've uploaded here on github.

The main concern is this: If @liady github login or his personal computer ever become compromised then the attacker could potentially replace the function inside of url.txt with their own malicious code.

Thanks for the legwork - my i-flowers sent to you above.

@neildmd
That being said, it's obvious to me that the developer has no malicious intentions,

And I have never claimed otherwise.
Yet:

just look at all the other projects they've uploaded here on github.

Just look: (in)security by affinity (our) mindtrick: here among us, the anonymous Githubers.
(Plus a random IT Sec series of academic papers about the same, granted: very controversial.)

The main concern is this: If @liady github login or his personal computer ever become compromised...

or if he, his brother, or his (lol)cat decide to turn to a black hat hacker...

then the attacke[r]* could potentially replace the function inside of url.txt with their own malicious code.

And here we all agree in full.

(*) "Attacker", I presume

@Manamama Yes I feel your concerns. I'm not using this unless the netlify code is moved to local.