ui-json-capture

Warn

Audited by Socket on Sep 7, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/01-install-hook.js

This module is behaviorally suspicious: it globally monkey-patches XMLHttpRequest to target a specific endpoint path and collects full JSON result rows into a persistent in-memory global (window.__cap) with deduplication and error logging. No direct network exfiltration or payload execution is present in the provided fragment, but the design aligns with client-side scraping/data harvesting and could enable unauthorized data collection if used in an untrusted context.

Confidence: 62%Severity: 70%
Audit Metadata
Analyzed At
Sep 7, 2026, 05:56 AM
Package URL
pkg:socket/skills-sh/edwinhu%2Fworkflows%2Fui-json-capture%2F@afeb0b18b33ad4fdb77cb6b3f271cad65241d7a0f426df3f73abf603bba8692b
Security Audit — socket — ui-json-capture