embeddings

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The Advanced Patterns code calls AutoModel.from_pretrained("jinaai/jina-embeddings-v3", trust_remote_code=True), which at runtime fetches and can execute remote model code from the Hugging Face repo (https://huggingface.co/jinaai/jina-embeddings-v3), presenting a high-risk remote code execution dependency.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 09:37 PM