zoho-crm-connector
Warn
Audited by Snyk on Jun 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill instructs agents to call the AgentPMT MCP/REST endpoints (e.g., https://api.agentpmt.com/mcp/ and https://api.agentpmt.com/products/purchase) at runtime to fetch live schema and get_instructions responses that directly control agent prompts and behavior, so these URLs are runtime dependencies that supply instructions to the agent.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata