angular
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs using the Angular MCP server (e.g., running
npx @angular/cli mcp) and its tools which query the official docs at https://angular.dev at runtime (via search_documentation / get_best_practices), meaning https://angular.dev is used during runtime to fetch external content that can directly inform agent instructions and executes remote-distributed tooling.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata