nfs-storage
Warn
Audited by Snyk on Mar 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill includes a runtime Helm command that adds and installs a chart from https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts, which fetches remote Kubernetes manifests that will be applied/executed on the cluster and are relied on for dynamic NFS provisioning.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs installing packages, editing system files (e.g., /etc/exports, /etc/fstab), enabling/restarting systemd services, changing firewall and sysctl settings and writing to /proc — all privileged actions that modify the machine state and require sudo, so it poses a high risk of compromising the host.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata