skills/rheinmir/dym/dym-setup-maintain/Snyk

dym-setup-maintain

Warn

Audited by Snyk on Sep 7, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

Potentially malicious external URL detected (high risk: 0.80). The skill instructs the agent to download and execute an installation script from GitHub (https://raw.githubusercontent.com/Rheinmir/setup/orca/harness/poc-vendor-neutral/bootstrap.sh) and clone a repository during runtime (https://github.com/rheinmir/setup.git), which installs remote code.

Issues (1)

W012

MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 7, 2026, 06:22 AM

Issues

1