web-content-fetcher

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/fetch_js_content.js

The code appears to implement a webpage-to-Markdown scraper, with no clear evidence of intentional malware or data exfiltration. Main risks are unrestricted navigation to user-supplied destinations, file URL access, disabling Chromium's sandbox, and imperfect output-path containment checks. Risk depends on who controls the URL and filesystem context.

Confidence: 97%Severity: 56%
Audit Metadata
Analyzed At
Sep 25, 2026, 02:38 PM
Package URL
pkg:socket/skills-sh/shino369%2Fclaude-code-personal-workspace%2Fweb-content-fetcher%2F@9fa79f79e57bba7f017899ccb90257e0a00c90cd11202f905f9ebbd3abfbb926