trilogy-ds
Warn
Audited by Snyk on Jul 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The Designer and Reviewer agents explicitly call fetch_webpage at runtime to retrieve live documentation from https://design.bouyguestelecom.fr/api/components/{Name}?format=markdown (and related endpoints such as https://design.bouyguestelecom.fr/api/docs?format=markdown and https://design.bouyguestelecom.fr/api/components/all?format=markdown), and that fetched content is required and directly controls generation/verification of prompts and component code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata