seo-maker
Warn
Audited by Socket on Aug 4, 2026
1 alert found:
SecuritySecurityassets/dashboard-template.html
MEDIUMSecurityMEDIUM
assets/dashboard-template.html
No clear evidence of intentional malware behavior within this fragment itself. However, the module is security-sensitive: it repeatedly renders untrusted results into the DOM via innerHTML without sanitization (DOM XSS risk) and, under file://, it dynamically injects and executes a local results.js (direct script execution risk if artifacts are tampered). Treat results.json/results.js as fully trusted or add strict sanitization/escaping and avoid dynamic script execution.
Confidence: 72%Severity: 80%
Audit Metadata