skills/jaml-group/jaml-skills/jaml/Snyk

jaml

Warn

Audited by Snyk on Sep 28, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The workflow references an external skills installation command using npx skills add jaml-group/jaml-skills --skill jaml, which constitutes an unverifiable runtime external dependency from a third-party GitHub repository.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 28, 2026, 03:09 AM

Issues

1