gitops-workflows
Warn
Audited by Snyk on Apr 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill contains installation commands that fetch and execute remote content at runtime (e.g., curl -s https://fluxcd.io/install.sh | sudo bash, kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml, kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.24.0/controller.yaml, and kubectl apply -k github.com/fluxcd/flagger//kustomize/istio), which directly execute remote code/manifests and are presented as required installation steps.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata