alibabacloud-mcp-core-script-generate
Warn
Audited by Snyk on Jul 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill and its local checker fetch API metadata at runtime (e.g. https://next.api.aliyun.com/meta/v1/products/{product}/versions/{version}/api-docs.json and https://api.aliyun.com/meta/v1/products/{product}/versions/{version}/apis/{action}/api.json), and that JSON is required at runtime to determine API parameters and thus directly controls the generated prompts/script—constituting a required external runtime dependency.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata