design-md-generator
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyscripts/extract_css.py
LOWAnomalyLOW
scripts/extract_css.py
This is a CSS inspection utility with no clear malicious payload or intentional data theft. It has a potential SSRF/network-access risk because it fetches a user-controlled URL and arbitrary stylesheet URLs found in remote HTML without host, scheme, redirect, or private-address restrictions. Risk is moderate when exposed to untrusted users or running in a privileged network, and low when used locally with trusted URLs.
Confidence: 98%Severity: 55%
Audit Metadata