skills/agoodway/goodskills/bootstrap-mcp-oauth/Snyk

bootstrap-mcp-oauth

Warn

Audited by Snyk on Oct 4, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The README instructs cloning an external repository via npx skills add agoodway/GoodSkills --skill bootstrap-mcp-oauth, which constitutes an unverifiable runtime external dependency under common/reputable unofficial provenance.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 4, 2026, 06:38 PM

Issues

1