greptimedb-trigger
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to "use WebFetch to load and understand" remote documentation (e.g., https://docs.greptime.com/enterprise/trigger/, https://docs.greptime.com/reference/sql/trigger-syntax/, https://greptime.com/blogs/2025-12-23-trigger-quick-start, https://docs.greptime.com/reference/sql/tql/), meaning these URLs are fetched at runtime and their content would directly control the agent's instructions and behavior.
Audit Metadata