patrick-visual-language

Warn

Audited by Socket on Nov 4, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/render.py

This is a local HTML screenshot and mobile-width measurement utility, not evidence of intentional malware. It executes the target page in headless Chrome with --allow-file-access-from-files, so untrusted HTML may gain broader local-file access within Chrome; page.name is also inserted into an HTML attribute without escaping. No explicit exfiltration endpoint, credentials, or network-sending logic appears in this file. Severity is context-dependent and elevated when the input page is untrusted.

Confidence: 98%Severity: 53%
Audit Metadata
Analyzed At
Nov 4, 2026, 06:24 AM
Package URL
pkg:socket/skills-sh/patrick-fu%2Fawesome-skills%2Fpatrick-visual-language%2F@70c08ce574d0f6c7a2b8fd2b72cfcf32d48ab086e98a3a52acd12688af683e5b