skills/reason-machines/devtools-skills/godot-devtool-mcp-server/Snyk

godot-devtool-mcp-server

Warn

Audited by Snyk on Oct 8, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning an external repository from GitHub during setup, which represents an unverified runtime external dependency from a third-party source.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 8, 2026, 11:44 PM

Issues

1