optimize-agentic-workflow
Warn
Audited by Snyk on Jul 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs the agent to "Load these files from
github/gh-aw" (e.g., .github/aw/github-agentic-workflows.md), which are fetched at runtime and would directly supply instructions/context that control the agent's behavior, so I flag the repository reference github/gh-aw.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata