media-processing

Warn

Audited by Snyk on Mar 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.80). The skill's runtime scripts install and invoke the external RMBG package (via "npm install -g rmbg-cli") and the docs show models are downloaded at first use (e.g., https://unpkg.com/@rmbg/model-modnet/modnet-256.onnx and the repo https://github.com/mrgoonie/rmbg), so remote content is fetched during execution and remote code/models are installed/executed as required dependencies.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 29, 2026, 03:17 AM
Issues
1