ah-fix-dom-flash

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/flash-detector.js

The fragment is a continuous DOM “flash/visibility/position/transform” detector that gathers computed styles, bounding-rect geometry, and short text snippets from matched elements and passes them to an external record(...) function. The snippet itself shows no direct malware/network/credential theft, but it creates a moderate privacy/security risk because it repeatedly captures UI content and layout metadata and its exfil/logging behavior depends entirely on the unseen record() implementation.

Confidence: 62%Severity: 55%
Audit Metadata
Analyzed At
Mar 27, 2026, 01:36 AM
Package URL
pkg:socket/skills-sh/arinhubcom%2Farinhub-dev-skills%2Fah-fix-dom-flash%2F@97a0eeee1fd72a189b25b8783403b98a89678cbc