meta-ads

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Anomaly
AnomalyLOW
campaign/scripts/lp_analyzer.py

The fragment appears to be a legitimate landing-page scraping and branding extraction utility, with no clear evidence of malware or intentional sabotage. It has a material SSRF risk because user-controlled and page-controlled URLs are fetched without scheme, host, redirect, port, or private-network restrictions. Local output paths are also caller-controlled and should be sandboxed. These issues require review in a service context, but the code does not show credential theft, persistence, command execution, or explicit data exfiltration.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Sep 20, 2026, 06:03 PM
Package URL
pkg:socket/skills-sh/fdarkaou%2Fmeta-ads-skill%2Fmeta-ads%2F@4150179e589cdfd71de3486e8d3e05da4fe62e8a