apple-mac-cicd
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). This skill scaffolds GitHub Actions workflows that at runtime fetch and execute external action code (for example uses: actions/checkout@v4 -> https://github.com/actions/checkout, softprops/action-gh-release -> https://github.com/softprops/action-gh-release, pnpm/action-setup -> https://github.com/pnpm/action-setup), which are required runtime dependencies that execute remote code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata