frontend-design-ultimate

Warn

Audited by Snyk on Nov 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill contains setup scripts (scripts/init-nextjs.sh, scripts/init-vite.sh, scripts/bundle-artifact.sh) that invoke npx to fetch external CLI tools and packages (create-next-app@latest, shadcn@latest, parcel, etc.) at runtime, establishing weak/unknown external operational dependencies.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 6, 2026, 08:37 AM
Issues
1