seo-maker

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Security
SecurityMEDIUM
assets/dashboard-template.html

No clear evidence of intentional malware behavior within this fragment itself. However, the module is security-sensitive: it repeatedly renders untrusted results into the DOM via innerHTML without sanitization (DOM XSS risk) and, under file://, it dynamically injects and executes a local results.js (direct script execution risk if artifacts are tampered). Treat results.json/results.js as fully trusted or add strict sanitization/escaping and avoid dynamic script execution.

Confidence: 72%Severity: 80%
Audit Metadata
Analyzed At
Aug 4, 2026, 11:03 AM
Package URL
pkg:socket/skills-sh/alpoxdev%2Fhypercore-skills%2Fseo-maker%2F@2247cd53ead36c1d4b828f4f2238bdd53e42d2e3b2a94288097df460173cbfda
Security Audit — socket — seo-maker