sap-rpt1
Warn
Audited by Snyk on Jul 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill requires the external sap-rpt-1-oss package to run (error messages and dry-run text instruct "<python-3.11> -m pip install git+https://github.com/SAP-samples/sap-rpt-1-oss") and the upstream package/model checkpoints are hosted at Hugging Face (https://huggingface.co/SAP/sap-rpt-1-oss), so runtime inference depends on fetching and executing remote code/artifacts from these URLs.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata