zoho-crm-connector

Warn

Audited by Snyk on Jun 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The skill instructs agents to call the AgentPMT MCP/REST endpoints (e.g., https://api.agentpmt.com/mcp/ and https://api.agentpmt.com/products/purchase) at runtime to fetch live schema and get_instructions responses that directly control agent prompts and behavior, so these URLs are runtime dependencies that supply instructions to the agent.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 24, 2026, 03:14 AM
Issues
1