gtm-sales-pack

Warn

Audited by Snyk on Jul 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The scripts (scripts/extract-voice-from-gmail.py) call the Gmail API at runtime (scope/endpoint: https://www.googleapis.com/auth/gmail.readonly) to fetch a founder's sent messages and inject extracted voice/profile data into the sales-pack, which directly controls downstream message generation—this is a runtime external dependency that influences agent prompts.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 3, 2026, 05:53 PM
Issues
1
Security Audit — snyk — gtm-sales-pack