design-md-generator

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/extract_css.py

This is a CSS inspection utility with no clear malicious payload or intentional data theft. It has a potential SSRF/network-access risk because it fetches a user-controlled URL and arbitrary stylesheet URLs found in remote HTML without host, scheme, redirect, or private-address restrictions. Risk is moderate when exposed to untrusted users or running in a privileged network, and low when used locally with trusted URLs.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 15, 2026, 10:17 AM
Package URL
pkg:socket/skills-sh/hukusuke1007%2Fagent-skills%2Fdesign-md-generator%2F@76de316228930d2cc3620663bc6b6f0530da0053aa768212f193a2e3ea5de90a