web-scraper
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyscripts/scrape.py
LOWAnomalyLOW
scripts/scrape.py
The fragment is a conventional web scraper and contains no clear malicious payload or intentional data theft. It has security concerns: arbitrary URL fetching can be used for SSRF-like access, URL-derived output paths may permit path traversal in recursive mode, and saved HTML can preserve active untrusted content. These risks should be addressed if the tool processes attacker-controlled URLs or runs with sensitive network/filesystem access.
Confidence: 97%Severity: 58%
Audit Metadata