convert-url-to-nextjs

Warn

Audited by Socket on Oct 21, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/diff-screenshots.sh

This is a screenshot comparison utility, not evidently malware. However, an untrusted --threshold value can become executable awk code and may allow arbitrary command execution. JSON control-character escaping is also incomplete. Avoid passing untrusted threshold values and validate them as numeric until corrected.

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Oct 21, 2026, 05:13 PM
Package URL
pkg:socket/skills-sh/yigitkonur%2Fskills-by-yigitkonur%2Fconvert-url-to-nextjs%2F@66740d05ed570790b9bcfa42f9de01e19f7cc1f9e403a37cb1d13ad98545d4fa