chaos-engineering-on-aws
Warn
Audited by Snyk on Jun 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The MCP setup guide explicitly instructs
git clone https://github.com/RadiumGu/Chaosmesh-MCP.gitfollowed by runningpython3 server.pyto add the chaosmesh-mcp MCP server, which is a runtime fetch of remote code that is executed and used by the skill (https://github.com/RadiumGu/Chaosmesh-MCP), so it directly executes external code at runtime.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata