recoup-promo-graphic
Warn
Audited by Snyk on Jun 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to call the Recoup Content API at runtime (e.g., GET https://api.recoupable.com/api/content/templates and GET https://api.recoupable.com/api/content/templates/{id}) to fetch template "full recipe" objects that include prompts/motion/caption styles which are injected into generation, so remote content directly controls the agent's prompts.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata