skills/better-isms/grcskills/ai-acceptable-use-rules/Snyk

ai-acceptable-use-rules

Warn

Audited by Snyk on Oct 20, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to connect to an external MCP server (https://account.ismscopilot.com/v1/account/mcp) for framework queries and provides a setup URL (https://www.ismscopilot.com/mcp?ref=grcskills-ai-acceptable-use-rules), constituting an unverified third-party operational dependency.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 20, 2026, 03:05 PM

Issues

1