upgrading-dbt-core
Warn
Audited by Snyk on Aug 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill calls uvx at runtime to install and run dbt-autofix from the remote git URL git+https://github.com/dbt-labs/dbt-autofix.git (AUTOFIX_SPEC), which fetches and executes external code used by the migration flow.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata