Skip to main content

portless-local

Simplifies local development by replacing port numbers with stable, named .localhost URLs for easier access and management.

Install this skill

or
44/100

Security score

The portless-local skill was audited on May 28, 2026 and we found 26 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 429

Ngrok tunnel reference

SourceSKILL.md
429| ngrok | Public tunnel | `https://random.ngrok.io` | Share with others |
medium line 161

Access to hidden dotfiles in home directory

SourceSKILL.md
161Stops the proxy, removes the CA from OS trust store, deletes allowlisted files under `~/.portless`, the system state directory, and removes the portless block from `/etc/hosts`. May prompt for elevate
medium line 380

Access to hidden dotfiles in home directory

SourceSKILL.md
380| Port 1024+ (no sudo) | `~/.portless` |
medium line 381

Access to hidden dotfiles in home directory

SourceSKILL.md
381| Windows (any port) | `~/.portless` |
medium line 31

Access to .env file

SourceSKILL.md
31| **Hardcoded config** | CORS, OAuth, .env break when ports change | URLs are stable across restarts |
low line 324

Access to .env file

SourceSKILL.md
324echo "VITE_API_URL=$BACKEND_URL" > .env.local
low line 17

External URL reference

SourceSKILL.md
17> **Note:** By default, use HTTP (`http://myapp.localhost`). Only enable HTTPS (`--https` or `PORTLESS_HTTPS=1`) if the user specifically requests it (e.g., for OAuth, secure cookies, or HTTPS-only fe
low line 26

External URL reference

SourceSKILL.md
26| **Memorizing ports** | "Was the API on 3001 or 8080?" | Always `http://api.localhost` |
low line 29

External URL reference

SourceSKILL.md
29| **Agent confusion** | AI agents guess/hardcode wrong ports | `http://myapp.localhost` is deterministic |
low line 111

External URL reference

SourceSKILL.md
111portless alias my-postgres 5432 # -> http://my-postgres.localhost
low line 112

External URL reference

SourceSKILL.md
112portless alias redis 6379 # -> http://redis.localhost
low line 238

External URL reference

SourceSKILL.md
238# -> http://myapp.localhost
low line 242

External URL reference

SourceSKILL.md
242# -> http://myapp.localhost
low line 246

External URL reference

SourceSKILL.md
246# -> http://api.localhost
low line 254

External URL reference

SourceSKILL.md
254# -> http://api.myapp.localhost
low line 262

External URL reference

SourceSKILL.md
262# -> http://admin.myapp.localhost
low line 283

External URL reference

SourceSKILL.md
283# -> http://myapp.localhost
low line 287

External URL reference

SourceSKILL.md
287# -> http://fix-ui.myapp.localhost
low line 298

External URL reference

SourceSKILL.md
298# -> http://myapp.test
low line 312

External URL reference

SourceSKILL.md
312# -> http://my-postgres.localhost
low line 316

External URL reference

SourceSKILL.md
316# -> http://redis.localhost
low line 336

External URL reference

SourceSKILL.md
3363. Requests to `http://<name>.localhost` are proxied to the app
low line 428

External URL reference

SourceSKILL.md
428| **portless** | Local proxy | `http://myapp.localhost` | Clean local dev URLs |
low line 429

External URL reference

SourceSKILL.md
429| ngrok | Public tunnel | `https://random.ngrok.io` | Share with others |
low line 430

External URL reference

SourceSKILL.md
430| cloudflared | Public tunnel | `https://myapp.trycloudflare.com` | Share with others |
low line 434

External URL reference

SourceSKILL.md
434- [portless.sh](https://portless.sh/) - Official documentation
Scanned on May 28, 2026
View Security Dashboard
Installation guide →