bindcraft

Warn

Audited by Snyk on Apr 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 1.00). The Local installation instructions explicitly run remote code by instructing users to "git clone https://github.com/martinpacesa/BindCraft.git" and then "pip install -r requirements.txt" followed by "python bindcraft.py", so the fetched GitHub repository would be executed as part of setup/runtime.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 2, 2026, 04:41 AM
Issues
1