design-system-extractor
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalytools/design_system_extractor.py
LOWAnomalyLOW
tools/design_system_extractor.py
The code is a website design-system extraction utility and contains no clear malicious behavior. The primary security concerns are disabled TLS verification and unrestricted outbound requests to user-controlled or page-controlled URLs, which can create SSRF and data-access risks when operated on untrusted input. It should restrict URL schemes and private network destinations and enable certificate verification.
Confidence: 98%Severity: 52%
Audit Metadata