magazine-layout

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/html_to_pdf.py

The code appears to be a legitimate HTML-to-PDF utility and contains no clear malware or intentional backdoor. Its primary security concern is unsafe rendering of untrusted HTML: JavaScript execution, external resource loading, and explicit local-file access can expose local data or enable network interactions depending on the selected engine and renderer behavior. Restrict input to trusted HTML, disable JavaScript and local-file access where possible, and isolate rendering in a sandbox. The shown code also has a syntax error in the ArgumentParser epilog argument that must be fixed before use.

Confidence: 98%Severity: 52%
Audit Metadata
Analyzed At
Sep 19, 2026, 04:20 PM
Package URL
pkg:socket/skills-sh/isjiamu%2Fjiamu-skills%2Fmagazine-layout%2F@e765a2bcbab9f5cb0e11ec4539875bee3488dd432d387ebd031c35999beab769