sapui5-cli

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
templates/custom-middleware-template.js

No evidence of intentional malware, data exfiltration, backdoors, or sabotage is present. The code appears to be a collection of example middleware implementations. Security concerns include potential stored XSS from unsanitized Markdown, possible cross-user response leakage from the global URL-only cache, configuration-dependent SSRF through the proxy, unrestricted upload resource consumption, permissive CORS, and reliance on the resource resolver for path safety. These issues warrant review before production use.

Confidence: 96%Severity: 62%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:17 AM
Package URL
pkg:socket/skills-sh/secondsky%2Fsap-skills%2Fsapui5-cli%2F@7eefb724053c801e001951bfbc02c2331bd77f5a300a9ae37ad60a0a9eb81654