nuyoah-xiezhen-prompt
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The Skill's update flow (triggered when a user requests "检查或更新") instructs runtime fetching/execution of remote content — specifically running npx install/update that references the GitHub source https://github.com/nuyoah-ai-works/nuyoah-xiezhen-prompt and reading the remote manifest at https://knowledge.nuyoahonline.com/api/skills/nuyoah-xiezhen-prompt/manifest — which can fetch and execute remote code and alter the Skill.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata