skills/fellowship-dev/dogfooded-skills/setup-harness/Snyk

setup-harness

Warn

Audited by Snyk on Sep 21, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The skill includes an npx skills add installation command referencing an external GitHub repository (fellowship-dev/dogfooded-skills/ops/setup-harness), which constitutes an unofficial operational dependency.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 21, 2026, 03:01 AM

Issues

1