https://github.com/obra/superpowers ·
lang: javascript ·
LOC: ·
source: user_submitted
| Rule | Severity | Count |
|---|---|---|
SEC006 XSS Risk |
high | 1 |
SEC006
XSS Risk
skills/brainstorming/scripts/helper.js:57
· conf 0.40
[SEC006] XSS Risk: Direct HTML injection without sanitization.
Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/27d5efbb-710e-4fb2-9b57-54713849fa68/.