tencent-hunyuanvideo
Warn
Audited by Snyk on Jul 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill instructs operators to git-clone and run code from the repository https://github.com/Tencent-Hunyuan/HunyuanVideo-1.5.git and to fetch model artifacts via https://huggingface.co/tencent/HunyuanVideo-1.5 (and its API https://huggingface.co/api/models/tencent/HunyuanVideo-1.5), which are runtime fetches that download remote code/weights and then install/execute that code (e.g., pip install, torchrun generate.py).
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata