auth0-express
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill's automated setup script runs a remote installer via curl piped to sh (https://raw.githubusercontent.com/auth0/auth0-cli/main/install.sh), which fetches and executes remote code at runtime and is presented as a required step for automated setup.
Audit Metadata