skills/ythx-101/live-panel-skill/live-panel/Socket

live-panel

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Security

Securityassets/template.html

MEDIUM

SecurityMEDIUM

assets/template.html

No clear malware behavior is present. There is a configuration-driven HTML injection risk: untrusted configuration values are interpolated into style attributes in markup assigned to `innerHTML`. Restrict configuration origins and validate or safely construct all attribute values before rendering.

Confidence: 96%Severity: 70%

Audit Metadata

Analyzed At

Oct 20, 2026, 09:02 PM

Package URL

pkg:socket/skills-sh/ythx-101%2Flive-panel-skill%2Flive-panel%2F@439c9addce7e7ac2b4e384aa847a351926c8f945