mirrord-prev-env
Warn
Audited by Snyk on Jun 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill's CI mode explicitly requires and recommends the GitHub Action "metalbear-co/mirrord-preview" (referenced as uses: metalbear-co/mirrord-preview@main and https://github.com/metalbear-co/mirrord-preview), which the runner will fetch and execute at workflow runtime, satisfying the conditions for a runtime external dependency that executes remote code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata