skills/wix/skills/wix-app/Socket

wix-app

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly

Anomalyreferences/site-plugin/EXAMPLES.md

LOW

AnomalyLOW

references/site-plugin/EXAMPLES.md

No clear evidence of intentional malware or supply-chain sabotage. The examples have a meaningful DOM injection risk because attribute values and Wix Data titles are inserted into innerHTML without escaping. Use textContent or safe DOM construction for text, and validate or safely handle style values.

Confidence: 98%Severity: 62%

Audit Metadata

Analyzed At

Oct 2, 2026, 07:15 AM

Package URL

pkg:socket/skills-sh/wix%2Fskills%2Fwix-app%2F@bac8032bdc0b90f4917d203cb4643cad2427afbeb23c9123c355e8213d08c70c