stream-docs
Warn
Audited by Snyk on May 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill explicitly fetches https://getstream.io/cli/llms.txt (and then https://getstream.io/cli/docs/{slug}.md) at runtime and uses the fetched doc content and exact URLs to directly control what the agent responds (verbatim quotes and link grounding), so this is a required external runtime dependency that controls the agent's prompts.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata