building-blog
Warn
Audited by Snyk on Jul 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The generator script and guidance call the Google Generative Language API at runtime (e.g. https://generativelanguage.googleapis.com/v1beta/models/${GEMINI_MODEL}:generateContent?key=${geminiKey} and https://generativelanguage.googleapis.com/v1beta/models?key=$GEMINI_API_KEY), which executes remote model code and is relied on for AI-generated hero images.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata