rd-direction-finder

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/render_report.py

This is a report-rendering utility with no evident malicious behavior. The main security concern is potential stored XSS or unsafe link generation when untrusted payload content is rendered: raw HTML is enabled in Mistune, and Markdown values and URL schemes are insufficiently sanitized. Risk depends on whether payloads are trusted and whether generated reports are opened in a browser. The code is readable and not intentionally obfuscated.

Confidence: 98%Severity: 52%
Audit Metadata
Analyzed At
Aug 27, 2026, 01:24 AM
Package URL
pkg:socket/skills-sh/patsnap%2Fskills%2Frd-direction-finder%2F@6569a3731ff4bc04aff4abb658a50f74b2454f412323f05d75ee0ef4a5a4c831