customer-journey-map
Warn
Audited by Snyk on Jul 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly reads and dispatches content from local plugin files at runtime that directly control agent behavior — e.g.
${CLAUDE_PLUGIN_ROOT}/agents/persona-builder.md,${CLAUDE_PLUGIN_ROOT}/references/methodology.md,${CLAUDE_PLUGIN_ROOT}/assets/schemas/profiles/journey-map.profile.json, and${CLAUDE_PLUGIN_ROOT}/agents/renderer.md, which are used to drive prompts and rendering steps.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata