godot
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). This skill includes runtime commands that fetch and execute remote code — e.g. curl -L https://itch.io/butler | sh (installing butler), curl -L "https://github.com/Randroids-Dojo/godot/releases/download/automation-latest/godot-automation-linux-x86_64.zip" (download+execute Godot binary), and git clone https://github.com/MikeSchulze/gdUnit4.git / git clone https://github.com/Randroids-Dojo/godot.git which are referenced as required setup steps and will pull and run external code during CI/runtime.
Audit Metadata