memory-view

Warn

Audited by Socket on Jun 27, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/lib/render-all.ts

No clear evidence of classic malware is present in this fragment itself (no network/process/FS actions, no dynamic eval). However, the module has meaningful security risk because it (1) embeds and executes imported client-side JavaScript via `<script>${JS}</script>` (trust depends on `./assets.ts`), and (2) relies on unseen rendering helpers (`memRow`, `renderFindingCard`) to safely encode potentially memory-derived/untrusted text into HTML. Additionally, it may embed raw sensitive memory-derived content depending on redaction state, creating a high privacy/handling risk for shared outputs.

Confidence: 55%Severity: 56%
Audit Metadata
Analyzed At
Jun 27, 2026, 02:52 PM
Package URL
pkg:socket/skills-sh/Mark-Life%2Fagent-skills%2Fmemory-view%2F@a3afec15b564078ad7e6fda2cdcb7cc09b6ecde0f3606a5b6927032f316d84e7
Security Audit — socket — memory-view