realtor
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill explicitly spawns a reference-validator / skeptic at runtime and fetches primary-source URLs (e.g., https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title26-section280A&num=0&edition=prelim) whose fetched content is used to gate/alter outputs (verified vs [UNVERIFIED]), so these external URLs are runtime dependencies that directly control the agent's output.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata