pptx-slides

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/svg.ts

The fragment is a simple SVG transformation utility and shows no evidence of malware or supply-chain sabotage. However, `sanitizeSvg` is not a robust security sanitizer: untrusted SVG content can retain active or externally referenced features and may become dangerous when rendered in a browser. Use a proven SVG sanitizer with an allowlist before rendering untrusted input, and avoid treating base64 encoding as sanitization.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Sep 14, 2026, 05:23 PM
Package URL
pkg:socket/skills-sh/proyecto26%2Fslides-ai-plugin%2Fpptx-slides%2F@bc15128c8e147319db0333ea2268f17eb75f0a49a4d530bac92f94a177643eff