market

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/competitor_scanner.py

The code is a web-page competitor scanner and contains no clear malware, credential theft, persistence, or covert exfiltration behavior. It has a material security weakness because it accepts arbitrary destinations and disables TLS certificate and hostname verification. Restrict URLs and redirects to approved public hosts, validate schemes and destinations, and retain normal TLS verification before using it with untrusted input or inside sensitive networks.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 21, 2026, 05:06 PM
Package URL
pkg:socket/skills-sh/kmshihab7878%2Fclaude-code-setup%2Fmarket%2F@c7ae4c82d1ab1d2f661d081676f4b8b6777f9056d6be686dce3f772ae8c6e454