pp-godaddy
Warn
Audited by Snyk on Jul 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill requires installing the CLI with a remote Go module via "go install github.com/mvanhorn/printing-press-library/library/developer-tools/godaddy/cmd/godaddy-pp-cli@latest", which fetches and builds remote code at setup time and is a required runtime dependency.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes explicit, targeted commands that perform financial transactions on behalf of the caller: e.g. "domains purchase" (purchase/register a domain) and "auctions-aftermarket ... Places multiple bids" (submit auction bids). The auth section requires API key/secret and documents GODADDY_ALLOW_WRITES for live account-changing requests, showing the CLI is capable of executing live monetary actions rather than only read-only or generic operations. These are specific transaction operations (sending payments/bids), so this skill grants Direct Financial Execution capability.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata