semantius-architect

Warn

Audited by Snyk on Jun 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs fetching remote model files at runtime via HTTP(S) using Bash curl (e.g., "curl -s ") and then ingesting that raw content into the agent context for processing, which is a runtime external dependency that directly controls prompts and behavior (flagged pattern: http(s) URL fetched via curl -s <url>).

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 28, 2026, 03:25 PM
Issues
1
Security Audit — snyk — semantius-architect