configure-axis

Warn

Audited by Snyk on Jul 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The skill doc explicitly states AXIS will clone Git URLs at runtime and includes the repository "https://github.com/netlify/agent-runner-orchestrator", which would be fetched and its axis.config/scenarios merged (allowing remote prompts/instructions to control runs).

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 17, 2026, 07:37 PM
Issues
1
Security Audit — snyk — configure-axis