skills/ckorhonen/claude-skills/qmd/Snyk

qmd

Warn

Audited by Snyk on Sep 15, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installation of a third-party GitHub repository (https://github.com/tobi/qmd) via bun install -g, constituting an unofficial operational runtime dependency.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 15, 2026, 04:46 PM

Issues

1