novel-storyboard

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/novel-storyboard.mjs

No evidence of malware or concealed behavior. Export has a path traversal risk because untrusted segment IDs control filesystem paths, potentially causing unintended file reads/copies or writes when processing a malicious storyboard. Validate IDs as safe path components and enforce resolved-path containment.

Confidence: 98%Severity: 70%
Audit Metadata
Analyzed At
Oct 14, 2026, 06:28 AM
Package URL
pkg:socket/skills-sh/eternityspring%2Fshuohao-skills%2Fnovel-storyboard%2F@e3dc68f2ea225fd2323cf84667d103ba35d47b7427d6782d56775bd79eff4b7d