solutions-installer

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). This skill fetches SQL from an external GitHub repository and executes the scripts unmodified with high-privilege (ACCOUNTADMIN) access, creating a strong supply-chain & arbitrary-execution risk that could be abused for data exfiltration or account compromise.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill clones and reads code from the remote repository at runtime and then executes SQL from that repo, which is remote code execution (git clone https://github.com/Snowflake-Labs/sf-solutions.git causes the fetched scripts/manifests to control what is executed).