deploy
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
AnomalyAnomalyscripts/style-fingerprint.mjs
LOWAnomalyLOW
scripts/style-fingerprint.mjs
The code is a readable browser-based webpage style-analysis utility, not apparent malware. It performs no explicit data theft or persistence, but passing an unvalidated command-line URL to Playwright creates a meaningful arbitrary-navigation/SSRF and untrusted-page execution risk. Restrict allowed schemes and hosts, isolate the browser, disable or constrain access to local and private networks, and avoid sensitive browser credentials.
Confidence: 98%Severity: 55%
Audit Metadata