ai-sdk
Warn
Audited by Snyk on Mar 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs fetching remote docs and model lists at runtime (e.g., "https://ai-sdk.dev/api/search-docs?q=…" and the curl to "https://ai-gateway.vercel.sh/v1/models"), which the agent uses to determine APIs and choose model IDs—remote content that directly controls agent behavior and is relied on when local docs are missing.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata