skills/holon-run/uxc/coinapi-openapi-skill/Snyk

coinapi-openapi-skill

Warn

Audited by Snyk on Oct 16, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The skill references a GitHub raw repository URL for downloading an OpenAPI schema file (https://raw.githubusercontent.com/holon-run/uxc/main/skills/coinapi-openapi-skill/references/coinapi-market.openapi.json) during setup, constituting an unofficial third-party runtime dependency.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 16, 2026, 10:10 PM

Issues

1