ecommerce-designer
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalyscripts/render_template.py
LOWAnomalyLOW
scripts/render_template.py
The fragment appears intended for local HTML-to-image rendering and does not contain evident malware. As written, it cannot run because several theme gradient strings are unterminated. If corrected, the main security concerns are unescaped user input rendered as active HTML, possible external resource loading through user-controlled URLs, and unrestricted filesystem output paths. These are security risks in an untrusted-input deployment but are not evidence of malicious supply-chain behavior in this fragment.
Confidence: 98%Severity: 55%
Audit Metadata