skills/marioluciofjr/skills/analise-swot/Socket

analise-swot

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly

Anomalyscripts/gerar-swot-visual.py

LOW

AnomalyLOW

scripts/gerar-swot-visual.py

No clear malware behavior is present. However, untrusted Markdown content is embedded into HTML and JavaScript without escaping, creating a stored XSS risk when the generated report is opened. Use context-appropriate escaping or safe DOM text APIs, and avoid constructing HTML with untrusted strings.

Confidence: 98%Severity: 64%

Audit Metadata

Analyzed At

Sep 23, 2026, 06:25 PM

Package URL

pkg:socket/skills-sh/marioluciofjr%2Fskills%2Fanalise-swot%2F@daf573f1e0a8e35d4fe6d548a0c6bd3926b5f4169ffc77c1bf5570818419ccc7