sinch-whatsapp
Warn
Audited by Snyk on Jul 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to fetch canonical Sinch docs at runtime (e.g., the OpenAPI YAML https://developers.sinch.com/_bundle/docs/conversation/api-reference/conversation.yaml?download and the WhatsApp template/message docs) to determine exact request/response fields, which directly controls code generation/prompts.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata