selenium-cucumber-expert

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/scaffold-selenium-bdd.mjs

The code appears intended as a project scaffolder, not malware. However, an unvalidated `--name` can redirect filesystem writes outside the current directory, and the generated `pom.xml` is visibly malformed. Restrict the project name to a safe single directory name, validate package input, and correct the template before use.

Confidence: 99%Severity: 72%
Audit Metadata
Analyzed At
Sep 27, 2026, 10:42 AM
Package URL
pkg:socket/skills-sh/jmr85%2Fe2e-agent-skills%2Fselenium-cucumber-expert%2F@4831921a201700b037a82e177abc299b4583e7cda30ddc9d13be4e355ea83ca6