improve-threejs
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill tells the user to fetch canonical fix recipes at runtime from https://www.react.doctor/prompts/rules//.md, which is an external document used to control how fixes are applied (runtime retrieval of instructions); additionally it runs remote code via npx react-doctor@latest --verbose.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata