praveenjuge/teak

Please review the Teak monorepo for production security risks across the web app, API gateway, Convex backend, browser extensions, desktop app, mobile app, auth/session handling, file and URL ingestion, AI processing workflows, public API/MCP surfaces, and release/update paths.

Teak is a personal knowledge hub for creative people to collect, organize, remember, and rediscover ideas and inspiration. It spans a Next.js web app, Expo mobile app, Electron desktop app, Chrome extension, Raycast extension, public API/MCP gateway, and Convex backend with AI-powered card classification, metadata extraction, link processing, storage, billing, and sync. Authentication and session handling (Better Auth + Convex), API keys/public API/MCP routes, browser extension auth and content scripts, file uploads/media storage/thumbnails, AI/link metadata fetching and SSRF/path traversal risks, webhooks/billing, secrets handling, desktop update/signing, Raycast/extension token storage, and permission boundaries across web/mobile/desktop.