mcp-server
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill instructs agents at runtime to call the ServiceNow MCP endpoints (e.g., https://[instance].service-now.com/api/x_mcp/mcp_server/tools/list and https://[instance].service-now.com/api/x_mcp/mcp_server/tools/call), which return tool definitions and trigger remote tool execution, so fetched content directly controls agent behavior and execution.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata