runpod

Warn

Audited by Snyk on Feb 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.80). The skill deploys and runs remote Docker images from GitHub Container Registry at runtime (e.g., ghcr.io/conalmullan/video-toolkit-qwen-edit:latest and the other ghcr.io/conalmullan/video-toolkit-... image URLs), which causes execution of externally fetched code and is a required runtime dependency.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 24, 2026, 12:45 PM