patrick-visual-language
Warn
Audited by Socket on Nov 4, 2026
1 alert found:
AnomalyAnomalyscripts/render.py
LOWAnomalyLOW
scripts/render.py
This is a local HTML screenshot and mobile-width measurement utility, not evidence of intentional malware. It executes the target page in headless Chrome with --allow-file-access-from-files, so untrusted HTML may gain broader local-file access within Chrome; page.name is also inserted into an HTML attribute without escaping. No explicit exfiltration endpoint, credentials, or network-sending logic appears in this file. Severity is context-dependent and elevated when the input page is untrusted.
Confidence: 98%Severity: 53%
Audit Metadata