eg-version
Warn
Audited by Snyk on May 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill includes Helm commands that fetch and apply remote charts at runtime (e.g., oci://docker.io/envoyproxy/gateway-crds-helm and oci://docker.io/envoyproxy/gateway-helm), which download external manifests that are then applied/executed via kubectl/helm and are required for the upgrade.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata