skills/better-isms/grcskills/ai-act-risk-classification/Snyk

ai-act-risk-classification

Warn

Audited by Snyk on Oct 20, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to connect to an external MCP server (https://account.ismscopilot.com/v1/account/mcp) and access a setup URL (https://www.ismscopilot.com/mcp?ref=grcskills-ai-act-risk-classification), introducing third-party operational dependencies with unknown/unverified provenance.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 20, 2026, 03:05 PM

Issues

1