rd-direction-finder
Warn
Audited by Socket on Aug 27, 2026
1 alert found:
AnomalyAnomalyscripts/render_report.py
LOWAnomalyLOW
scripts/render_report.py
This is a report-rendering utility with no evident malicious behavior. The main security concern is potential stored XSS or unsafe link generation when untrusted payload content is rendered: raw HTML is enabled in Mistune, and Markdown values and URL schemes are insufficiently sanitized. Risk depends on whether payloads are trusted and whether generated reports are opened in a browser. The code is readable and not intentionally obfuscated.
Confidence: 98%Severity: 52%
Audit Metadata