skills/better-isms/grcskills/risk-treatment-plan-drafting/Snyk

risk-treatment-plan-drafting

Warn

Audited by Snyk on Oct 20, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to connect to an external MCP server and setup page (https://account.ismscopilot.com/v1/account/mcp and https://www.ismscopilot.com/mcp?ref=grcskills-risk-treatment-plan-drafting) for framework lookups, constituting a weak third-party operational dependency.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 20, 2026, 03:05 PM

Issues

1