runpod
Warn
Audited by Snyk on Feb 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill deploys and runs remote Docker images from GitHub Container Registry at runtime (e.g., ghcr.io/conalmullan/video-toolkit-qwen-edit:latest and the other ghcr.io/conalmullan/video-toolkit-... image URLs), which causes execution of externally fetched code and is a required runtime dependency.
Audit Metadata