ag-update
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill explicitly fetches remote content at runtime (e.g. https://raw.githubusercontent.com/ag-grid/skills/main/skills/ag-update/VERSION.md and the ag-grid documentation URLs like https://www.ag-grid.com/{framework}-data-grid/upgrading-to-ag-grid-{version}/) and uses that fetched content to decide agent control flow and to generate/update instructions, so these external URLs directly control the agent's behavior.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata