describe-pr

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/inject-walkthrough-diffs.sh

This is a utility for inserting selected Git diffs into a walkthrough HTML file. No evidence of intentional malware is present. However, untrusted diff content can cause HTML/script injection because the closing-script-tag escaping is case-sensitive; use only trusted diffs or fix the escaping before embedding externally supplied diffs.

Confidence: 98%Severity: 53%
Audit Metadata
Analyzed At
Oct 5, 2026, 07:13 AM
Package URL
pkg:socket/skills-sh/bleedingdev%2Ftraining-skills%2Fdescribe-pr%2F@1dbaae5dae219d5e260a706534207771d6a58f170ca16103fbfdac4755f36d30