create-marp-deck

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/marp-mobile.py

The code appears to be a local Markdown-to-HTML slide generator rather than malware. Its main security concern is unsafe generation of browser-rendered HTML: raw Markdown HTML and custom CSS are trusted, and the slideshow link lacks URL-scheme validation. This is potentially unsafe when processing untrusted input or when generated files are opened in a privileged browser context. The shown fragment also contains syntax errors that prevent execution as-is.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 12:01 PM
Package URL
pkg:socket/skills-sh/omerr%2Fclaude-skills%2Fcreate-marp-deck%2F@5b6a6ad67b90678e6af16274e2622d72b190fc39665a969f60fc607556b70fae
Security Audit — socket — create-marp-deck