dependency-audit
Warn
Audited by Snyk on Jun 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill instructs automated Stage 2 scans to use the Socket CLI (package "socket" / legacy "@socketsecurity/cli"), which must be fetched/installed at runtime (e.g., via npx socket@latest or npm install -g socket) and talks to https://socket.dev, so it is a runtime external dependency that causes remote code to be fetched/executed for automation.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata