skills/better-isms/grcskills/risk-acceptance-memo/Snyk

risk-acceptance-memo

Warn

Audited by Snyk on Oct 20, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to connect to an external MCP server at https://account.ismscopilot.com/v1/account/mcp and provides a setup URL at https://www.ismscopilot.com/mcp?ref=grcskills-risk-acceptance-memo, which represents an unverifiable operational runtime dependency with unestablished first-party provenance.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 20, 2026, 03:05 PM

Issues

1