skills/steveclarke/dotfiles/better-stimulus/Socket

better-stimulus

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly

Anomalyreferences/solid-principles.md

LOW

AnomalyLOW

references/solid-principles.md

The visible code has a DOM-based XSS risk because API-provided result titles are inserted into innerHTML without escaping. The fragment does not show evidence of malware; the omitted portions, including the API implementation, are not assessed.

Confidence: 98%Severity: 68%

Audit Metadata

Analyzed At

Oct 9, 2026, 01:51 AM

Package URL

pkg:socket/skills-sh/steveclarke%2Fdotfiles%2Fbetter-stimulus%2F@8083fa147bd584ec9ecbf9c790996c61b73265f4ff0bb6a5faec8098a52c0319