ict-risk-framework-check

Warn

Audited by Snyk on Oct 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to connect to an external Model Context Protocol (MCP) server at https://account.ismscopilot.com/v1/account/mcp and provides a setup URL https://www.ismscopilot.com/mcp?ref=grcskills-ict-risk-framework-check which constitutes an operational dependency on a third-party commercial service with common/reputable unofficial provenance.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 19, 2026, 09:04 PM
Issues
1