video-to-template
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
AnomalyAnomalyscripts/grab.mjs
LOWAnomalyLOW
scripts/grab.mjs
This is a browser screenshot automation script, not inherently malware. If command-line arguments or specifications are untrusted, raw interpolation of s.scroll, s.layer, and s.up creates a browser-side code-injection risk, and unsanitized outDir/s.name permits filesystem path traversal or unintended overwrites. The supplied URL is visited, but this fragment shows no explicit data exfiltration; severity is dependent on input trust and runtime permissions.
Confidence: 96%Severity: 65%
Audit Metadata