setup-linux-host-collection
Warn
Audited by Snyk on Aug 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs at runtime to fetch sections from the Observe docs (https://docs.observeinc.com/docs/configure-the-observe-agent-on-linux-windows-and-macos) to generate YAML edits that control the agent's configuration, and it also instructs adding APT/YUM repos (https://repo.observeinc.com/apt/ and https://yum.fury.io/observeinc/) which will fetch and install remote code on the host — meeting the criteria for runtime external dependencies that control behavior or execute code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata