acad-cuix-builder
Warn
Audited by Snyk on Jul 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill fetches and executes remote code at runtime: Step 5 will run "git clone https://github.com/ADN-DevTech/acad-cuix-builder" and then "dotnet run" on the cloned source, and the README installer uses "irm https://raw.githubusercontent.com/autodesk-platform-services/skills/main/skills/acad-cuix-builder/install.ps1 | iex" which directly downloads and executes a remote script, so external content is required and executed.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata