hf-cloud-python-env-setup
Warn
Audited by Snyk on Jul 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The SKILL.md explicitly states the bundled deploy scripts read image URIs from AWS's Deep Learning Containers catalog (https://aws.github.io/deep-learning-containers/reference/available_images/), which at runtime controls which remote container images (i.e., executable code) are selected for deployment.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata