companion-clis
Warn
Audited by Snyk on Nov 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skills and reference files contain setup instructions that download and execute installation scripts from external URLs such as
https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip,https://cli.github.com/packages/githubcli-archive-keyring.gpg, andhttps://hf.co/cli/install.sh, representing weak/unknown or third-party operational dependencies.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata