illustration-halftone-line

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/halftone.mjs

This is an SVG artwork generator, not clearly malware. However, compiling untrusted SVG templates permits arbitrary JavaScript execution through embedded <gen> blocks and ${...} expressions. Use only trusted templates or remove/restrict dynamic execution; the CLI also writes to the supplied output path.

Confidence: 99%Severity: 83%
Audit Metadata
Analyzed At
Oct 7, 2026, 12:14 PM
Package URL
pkg:socket/skills-sh/mengto%2Fskills%2Fillustration-halftone-line%2F@182c908ffa0f4b2db70688a8262cecdac4c11c9c2e14d0c6dd0a7390debdec8d