docx
Warn
Audited by Snyk on Jun 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The build script (./scripts/docx) downloads and executes a remote installer at runtime via "curl -sSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh" and then runs it (/tmp/dotnet-install.sh), which fetches and executes remote code as a required step to provision the dotnet runtime for the pipeline, so this URL is a runtime-executed external dependency.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata