kb-ingest
Warn
Audited by Socket on Oct 12, 2026
1 alert found:
AnomalyAnomalyscripts/docling_convert_html_with_figures.py
LOWAnomalyLOW
scripts/docling_convert_html_with_figures.py
The code appears to implement a document-fetching and conversion utility rather than malware. It has a moderate security concern because caller-controlled URLs are fetched with curl and redirects without scheme or host restrictions, which can enable SSRF or unintended resource access. The unsanitized output key is also unsafe when supplied by an untrusted caller. The fragment is syntactically incomplete as provided and would require correction before execution.
Confidence: 98%Severity: 55%
Audit Metadata