embeddings
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The Advanced Patterns code calls AutoModel.from_pretrained("jinaai/jina-embeddings-v3", trust_remote_code=True), which at runtime fetches and can execute remote model code from the Hugging Face repo (https://huggingface.co/jinaai/jina-embeddings-v3), presenting a high-risk remote code execution dependency.
Audit Metadata