pricing-finder

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/research.py

The code is a legitimate web-search and pricing-page collection utility. It does not show clear malware, backdoors, data theft, persistence, or destructive behavior. Security concerns are the disabled TLS verification for urllib API calls and a potential SSRF condition because untrusted competitor URLs are fetched with redirects and without host or private-network restrictions. These issues warrant hardening if input files can be supplied by untrusted users.

Confidence: 97%Severity: 54%
Audit Metadata
Analyzed At
Oct 20, 2026, 09:21 PM
Package URL
pkg:socket/skills-sh/varnan-tech%2Fopendirectory%2Fpricing-finder%2F@637edaa2988360f0e595105a6c6f4bfa1077c05fe69763e4148c59ac34905509