kestra-ops
Warn
Audited by Snyk on Sep 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installing an external package via npx from a GitHub repository path (
kestra-io/agent-skills@migrate-kestra-2), which constitutes an unverified external runtime dependency.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata