pds

Warn

Audited by Snyk on Jul 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The restore steps run "helm upgrade --install bluesky-pds nerkho/bluesky-pds …" which at runtime fetches and applies the remote Helm chart (nerkho/bluesky-pds), causing external manifests/code to be executed, so this is a required runtime external dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt instructs running kubectl/helm and patching Kubernetes resources (recreating secrets, installing/upgrading a Helm release, patching a Service nodePort), which modify cluster/host state and system configuration and thus can compromise the machine/environment.

Issues (2)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 5, 2026, 05:04 PM
Issues
2
Security Audit — snyk — pds