deployment-automation

Warn

Audited by Snyk on Mar 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.80). The included GitHub Actions (e.g., uses: appleboy/ssh-action@v1.0.0 — https://github.com/appleboy/ssh-action and other actions like actions/checkout, docker/build-push-action) are fetched from remote repositories and executed at workflow runtime, so they constitute required external code that runs as part of this skill.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 7, 2026, 03:43 AM