skills/vishalsachdev/claude-skills/map-generator/Socket

map-generator

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly

Anomalyassets/template-script.js

LOW

AnomalyLOW

assets/template-script.js

No clear malware or supply-chain attack behavior is present. The main security issue is potential XSS from unescaped marker title, description, and link values rendered as popup HTML. Escape or sanitize HTML and validate link protocols before rendering; use rel="noopener noreferrer" for target="_blank" links.

Confidence: 98%Severity: 55%

Audit Metadata

Analyzed At

Oct 2, 2026, 06:33 PM

Package URL

pkg:socket/skills-sh/vishalsachdev%2Fclaude-skills%2Fmap-generator%2F@45263968fc32a6d36afc7760e3ed3835b149501cf4d7646cd06d7167e4c48563