service-mesh
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime commands that fetch and execute remote content—specifically curl -L https://istio.io/downloadIstio | ... sh (scripts/setup-service-mesh.sh:62) which executes a remote installer, and kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.20/samples/addons/*.yaml (SKILL.md:416,440,463,475) which applies remote manifests—so these URLs are runtime external dependencies that execute remote code/configuration.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata