skills/cognitedata/builder-skills/skill-creator/Snyk

skill-creator

Warn

Audited by Snyk on Sep 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The repository defines Python utilities and scripts such as eval-viewer/generate_review.py and eval-viewer/viewer.html that load external resources via script tags from cdn.sheetjs.com and fonts.googleapis.com at runtime, constituting a common/reputable unofficial operational dependency.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 18, 2026, 02:13 PM

Issues

1