write-gitignore
Warn
Audited by Snyk on Oct 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill instructs installing a package from npm (
pnpm add -g @kirchdev/gitignore-sync), which constitutes an unverified external code dependency with unknown first-party distribution provenance, placing it in the high-risk tier.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata