dbt-migration
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The Quick Start includes a runtime install command that executes a remote script (curl -LsS https://ai.snowflake.com/static/cc-scripts/install.sh | sh) and instructs adding skills from a remote Git repository (cortex skill add https://github.com/sfc-gh-dflippo/snowflake-dbt-demo/.claude/skills), both of which fetch external content that is executed or injects skill definitions that directly control agent prompts/behavior.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata