analise-swot

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/gerar-swot-visual.py

No clear malware behavior is present. However, untrusted Markdown content is embedded into HTML and JavaScript without escaping, creating a stored XSS risk when the generated report is opened. Use context-appropriate escaping or safe DOM text APIs, and avoid constructing HTML with untrusted strings.

Confidence: 98%Severity: 64%
Audit Metadata
Analyzed At
Oct 25, 2026, 09:44 PM
Package URL
pkg:socket/skills-sh/marioluciofjr%2Fskills%2Fanalise-swot%2F@d504bee00723cdc7f962cf709c67333dcda3e0fe9221fb68d99a691e4c2a3fba