# Digital Product Listing Kit

A free, dependency-free toolkit for people who sell digital products.

| | |
| --- | --- |
| Version | 1.0.0 |
| Price | Free |
| Licence | MIT |
| Entry point | `server.py` |
| Source | Reimplemented from scratch in English; logic referenced from the local vendor toolkit without modifying it |

## What it does

Free lead magnet. Deterministic cover renderer, copy-friendly text export, and reproducible packaging with a content hash.

## Tools

| Tool | Description |
| --- | --- |
| `render_cover` | Return a deterministic SVG product cover as text. Writes nothing. | | `export_copy_txt` | Return a listing description as copy-friendly plain text. | | `content_hash` | Return a reproducible SHA-256 content hash for the given text parts. |

## Network

No outbound network requests.

## Security

- Read-only: no file is written and no process is started.
- Findings are redacted before they are returned.
- Paths are confined to the root you pass.

## Requirements

- Python 3.10 or above
- No account, no API key, no telemetry

## Agent Skills

| Skill | Purpose |
| --- | --- |
| `listing-kit-walkthrough` | Free walkthrough: first cover and description, no account needed. |

## Tests

```bash
python -m pytest -q # suite tests for this server
```

Every security claim above names a test that exists:

- `test_path_traversal_blocked`
- `test_no_subprocess_spawn`

## Licence and exclusions

- Single-seat licence unless a team licence is stated above. - No shell execution, no browser or account automation, no key custody. - The exclusion list is published in `security/EXCLUSIONS.md` in the team bundle so a reviewer can check it independently.