fetch-slides

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
fetch_slides.py

No clear malicious behavior or supply-chain backdoor is present. The code is a presentation downloader and converter, but it should not process untrusted URLs in a server context without SSRF protections, redirect validation, response-size limits, sandboxing, timeouts, and isolated Chromium/LibreOffice execution. The provided fragment also appears syntactically incomplete at the final `main(` call.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:25 PM
Package URL
pkg:socket/skills-sh/pamelafox%2Fpresentation-skills%2Ffetch-slides%2F@92afdfa7f4643f99a0727e800d08d92c817856d76aaf90eca2bb1c253dbe6877