local-action-verification
Warn
Audited by Snyk on Feb 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill fetches and executes an install script from raw.githubusercontent.com/nektos/act (an open third‑party GitHub URL) and also instructs the agent to read and act on .github/workflows in arbitrary repositories (user-provided workflow files), so it clearly ingests untrusted third‑party content that the agent will interpret as part of its workflow.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The install script (scripts/install-act.sh) downloads and pipes remote code at runtime from https://raw.githubusercontent.com/nektos/act/master/install.sh which is executed locally to install
act, making this a required external runtime dependency that executes remote code.
Audit Metadata