skills/reason-machines/security-skills/dfyx-code-security-review/Snyk

dfyx-code-security-review

Warn

Audited by Snyk on Sep 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.70). The instructions demonstrate cloning an unofficial third-party GitHub repository (https://github.com/EastSword/skill-dfyx_code_security_review.git) and installing its code and requirements as an operational dependency, which carries weak/unknown provenance.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 18, 2026, 05:06 PM

Issues

1