signoz-modifying-dashboards

Warn

Audited by Snyk on May 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill explicitly requires reading MCP resources at runtime (e.g., signoz://dashboard/query-builder-example and other signoz://dashboard/* or signoz://traces/query-builder-guide URIs) and tells the agent to use that fetched content to construct queries and follow the v5 schema, meaning remote content directly controls the agent's prompt/JSON construction.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 30, 2026, 12:45 AM
Issues
1
Security Audit — snyk — signoz-modifying-dashboards