skills/podo/design-agent-skills/react-doctor/Snyk

react-doctor

Warn

Audited by Snyk on Oct 22, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installation of an external repository via npx skills add millionco/react-doctor from GitHub (lines 44-49) and runtime execution of npx react-doctor@latest alongside fetching a remote playbook via curl from www.react.doctor (lines 55, 67), representing an unofficial/third-party operational dependency.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 22, 2026, 09:33 PM

Issues

1