<< Back to security report

──luongnv89/claude-howto/brand-voice — semgrep Scan

Repositoryluongnv89/claude-howto →

Commit1e16914 →

VerdictPASS

Score90

DateSep 2, 2026

──Findings

Severity	Rule	Message	File:Line
MEDIUM	python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected	Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.	luongnv89/claude-howto/brand-voice-6044cff9/scripts/check_links.py:73 →
MEDIUM	python.lang.security.audit.dynamic-urllib-use-detected.dynamic-urllib-use-detected	Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead.	luongnv89/claude-howto/brand-voice-6044cff9/scripts/vendor_assets.py:73 →