article-to-html

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
references/interactive.md

The fragment appears to implement benign browser-only documentation UI features and does not show malicious behavior. However, the feedback renderer has a persistent DOM XSS vulnerability because untrusted reviewer and comment values are inserted with innerHTML. Use textContent or properly escaped rendering, and handle malformed localStorage data. Overall risk is moderate for pages where an attacker can submit or influence feedback data, but malware likelihood is very low.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 01:16 PM
Package URL
pkg:socket/skills-sh/agentara%2Fskills%2Farticle-to-html%2F@edabff61ad1e7be4341c61709ca9e59044d46feca62174ce8e924db91c8edaff