app-store-screenshots
Warn
Audited by Snyk on Nov 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The decisive boundary is the setup instruction at line 7 (
npx skills add belt-sh/cli), which fetches and installs a repository whosebelt-showner is not established as the inference.sh vendor, so it is weak/unknown provenance and rated high, while the inference-sh raw GitHub install guide and related-skill commands are official and do not change the tier.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata