setup-repo
Warn
Audited by Snyk on Oct 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to install third-party/community skills via npm from
mattpocock/skills#59db609eb1e18aaf59b63284d0e52255aff0c63canddante-sparras/dstack, which constitute common/reputable unofficial operational dependencies.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata