frontend-slides
Warn
Audited by Snyk on Apr 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill instructs installing and running remote packages and cloning the repo (e.g., git clone https://github.com/zarazhangrui/frontend-slides.git) and its scripts (deploy.sh, export-pdf.sh) run npx/npm commands that fetch and execute remote code (Vercel CLI, Playwright/Chromium), so the GitHub URL and associated package installs are runtime dependencies that result in executing externally-fetched code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata