teardown

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Anomaly
AnomalyLOW
assets/projection.js

This module renders caller-supplied technical geometry as SVG and contains no evident malware behavior. A part line role is interpolated unescaped into the SVG data-line-role attribute, enabling SVG/HTML markup injection if untrusted part data is rendered and the result is inserted into a document. This is a conditional input-validation/XSS risk; no suspicious domains, URLs, IPs, credentials, environment variables, or file paths are present.

Confidence: 98%Severity: 53%
Audit Metadata
Analyzed At
Oct 25, 2026, 03:43 AM
Package URL
pkg:socket/skills-sh/jakubkrehel%2Fskills%2Fteardown%2F@f1c4c8ec44cbba7c61744491a69d40f594066c72a28c6bcb0cb9c5dfd6469d6c