design-system-extractor

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
tools/design_system_extractor.py

The code is a website design-system extraction utility and contains no clear malicious behavior. The primary security concerns are disabled TLS verification and unrestricted outbound requests to user-controlled or page-controlled URLs, which can create SSRF and data-access risks when operated on untrusted input. It should restrict URL schemes and private network destinations and enable certificate verification.

Confidence: 98%Severity: 52%
Audit Metadata
Analyzed At
Sep 17, 2026, 08:55 PM
Package URL
pkg:socket/skills-sh/kalilfagundes%2Fdesign-system-extractor-skill%2Fdesign-system-extractor%2F@8e93f1ca2763626a693757a8fc262e1fe1a1fa638ed6df3d2b9d8233ff090a54