media-processing
Warn
Audited by Snyk on Mar 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill's runtime scripts install and invoke the external RMBG package (via "npm install -g rmbg-cli") and the docs show models are downloaded at first use (e.g., https://unpkg.com/@rmbg/model-modnet/modnet-256.onnx and the repo https://github.com/mrgoonie/rmbg), so remote content is fetched during execution and remote code/models are installed/executed as required dependencies.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata