ecdash-api
Warn
Audited by Snyk on Jun 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill issues a runtime curl to "https://jay-portfolio-production.up.railway.app/api/echo-bridge" which returns {"tasks":[...]} (i.e., fetched task/instruction data) that can directly control agent behavior, so this external endpoint is used at runtime to supply instructions.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata