visual-pr

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/web-frames.mjs

This is a readable browser screenshot and animation-testing CLI, not evident malware. It deliberately exposes arbitrary page-context JavaScript execution and arbitrary local module execution through command-line options; therefore it should only be run with trusted arguments and trusted URLs/modules. Filesystem deletion is narrowly limited to matching frame files in the selected output directory. No embedded secrets, obfuscation, data theft, persistence, or malicious external endpoint is present.

Confidence: 98%Severity: 56%
Audit Metadata
Analyzed At
Sep 24, 2026, 03:39 PM
Package URL
pkg:socket/skills-sh/cristicretu%2Fpr-skill%2Fvisual-pr%2F@ef31ce8fb8af921359792f9eb5017a968d51d612dfe6653c98f9d715e1da719f