technical-drawing

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Anomaly
AnomalyLOW
assets/projection.js

This is a geometry-to-SVG renderer, with no evident malware behavior. The unescaped line.role value creates an injection risk when caller-controlled parts are rendered into an active document. Validate roles against an allowlist or escape them before interpolation; consider input-size limits for resource use.

Confidence: 98%Severity: 56%
Audit Metadata
Analyzed At
Oct 13, 2026, 02:12 AM
Package URL
pkg:socket/skills-sh/jakubkrehel%2Fskills%2Ftechnical-drawing%2F@0fcebbc3d2ebf3ed354f65568516dad84aa272f55a8379f50c4c685b1364948a