convert-url-to-nextjs
Warn
Audited by Socket on Oct 21, 2026
1 alert found:
SecuritySecurityscripts/diff-screenshots.sh
MEDIUMSecurityMEDIUM
scripts/diff-screenshots.sh
This is a screenshot comparison utility, not evidently malware. However, an untrusted --threshold value can become executable awk code and may allow arbitrary command execution. JSON control-character escaping is also incomplete. Avoid passing untrusted threshold values and validate them as numeric until corrected.
Confidence: 98%Severity: 78%
Audit Metadata