skills/getstream/agent-skills/react/Snyk

react

Warn

Audited by Snyk on Nov 4, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to install an external GitHub repository (addyosmani/web-quality-skills) via npx skills add, which constitutes an unverified third-party runtime operational dependency under weak/unknown provenance.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Nov 4, 2026, 11:04 PM

Issues

1