rabbit-r1-livekit
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The R1 frontend (creation/index.html) loads and executes the LiveKit UMD bundle directly from the CDN at https://unpkg.com/livekit-client/dist/livekit-client.umd.js at runtime in the WebView, which is a required dependency and thus executes remote code in the agent's execution context.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata