eks-ingress-migration

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
tools/report_to_html.py

The code is a local Markdown/YAML/JSON-to-HTML report generator and contains no clear malware behavior. It has meaningful injection risks when input files are untrusted: raw topology JSON can inject JavaScript, topology fields can reach innerHTML, and Markdown link schemes are not validated. These issues should be fixed by serializing topology data with json.dumps(), escaping or using textContent for displayed values, and allowing only safe link schemes. The malformed portions may also prevent normal execution. Overall risk is moderate for untrusted input, but there is no evidence of credential theft, exfiltration, reverse shells, or destructive activity.

Confidence: 98%Severity: 65%
Audit Metadata
Analyzed At
Sep 21, 2026, 03:24 PM
Package URL
pkg:socket/skills-sh/aws-samples%2Fsample-apex-skills%2Feks-ingress-migration%2F@bb3e602b8d0a43af7660750ade79db758eba1a844473a3201026c3eabddafedd