dhis2-apps
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs running npx opensrc (e.g. "npx opensrc path dhis2/dhis2-core" and "npx opensrc path dhis2/ui@v10.12.13") and references https://opensrc.sh / GitHub repos (e.g. https://github.com/dhis2/dhis2-core, https://github.com/dhis2/ui), which are runtime fetches of remote source that the agent reads to determine API contracts and directly influence prompts/code generation.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata