sap-rpt1

Warn

Audited by Snyk on Jul 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The skill requires the external sap-rpt-1-oss package to run (error messages and dry-run text instruct "<python-3.11> -m pip install git+https://github.com/SAP-samples/sap-rpt-1-oss") and the upstream package/model checkpoints are hosted at Hugging Face (https://huggingface.co/SAP/sap-rpt-1-oss), so runtime inference depends on fetching and executing remote code/artifacts from these URLs.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 23, 2026, 09:26 AM
Issues
1
Security Audit — snyk — sap-rpt1