skills/better-isms/grcskills/access-review-campaign-prep/Snyk

access-review-campaign-prep

Warn

Audited by Snyk on Oct 20, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to connect to an external MCP server at https://account.ismscopilot.com/v1/account/mcp and visit a setup URL at https://www.ismscopilot.com/mcp?ref=grcskills-access-review-campaign-prep, constituting a third-party operational dependency with unknown/common third-party provenance.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 20, 2026, 03:05 PM

Issues

1