doc-mindmap

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/doc_converter.py

The code is primarily a document conversion, local summarization, and organization utility. There is no clear evidence of malware, credential theft, persistence, reverse shells, or covert external exfiltration. The main security concern is insufficient validation of model-controlled directory and filename values before filesystem operations, creating a potential path traversal or unintended-write risk during --organize, especially with --rename. The provided fragment also contains syntax errors and will not execute without correction.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 22, 2026, 10:08 PM
Package URL
pkg:socket/skills-sh/crazynomad%2Fskills%2Fdoc-mindmap%2F@4927d63545016c29c26332a48bd6e53d02bbc82ab9b502e4991e8365f61cc6cf
Security Audit — socket — doc-mindmap