busa-ppt-factory

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
content/busa-ppt-factory-app/app/app.js

No clear malware behavior is present. The main concern is unsafe HTML construction: several provider-controlled values and identifiers reach innerHTML without contextual escaping, which can enable DOM-based XSS if the provider data is attacker-controlled. Review provider data trust boundaries and escape values for HTML text and attribute contexts.

Confidence: 94%Severity: 58%
Audit Metadata
Analyzed At
Oct 9, 2026, 02:22 AM
Package URL
pkg:socket/skills-sh/busabase%2Ftemplates%2Fbusa-ppt-factory%2F@7b30612d109f1f100d7d672ba1f1f7760d40342602e7aa05e554992e6771fe1f