light-crawl

Warn

Audited by Socket on Nov 8, 2026

1 alert found:

Anomaly
AnomalyLOW
src/light_crawl/probe.py

This code is a web-probing utility and shows no evidence of malware or unauthorized data exfiltration. Its main security concerns are SSRF if callers can supply untrusted URLs, including redirects to internal destinations, and resource exhaustion from unbounded decompression of responses. Severity is moderate and depends on whether the caller controls the URL or response source; no fixed domains, IPs, credentials, or environment variables are targeted.

Confidence: 97%Severity: 56%
Audit Metadata
Analyzed At
Nov 8, 2026, 12:30 AM
Package URL
pkg:socket/skills-sh/light0305%2Flight-science%2Flight-crawl%2F@16280beb43866d2e505848c519cd3b6d8e94de86ef6e66b73a72a419ba869134