app-builder
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The Ktor template includes a runtime setup command that pipes a remote script into a shell ("curl -s https://start.ktor.io/install.sh | bash"), which fetches and executes external code at skill runtime (https://start.ktor.io/install.sh).
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata