d2-config
Fail
Audited by Snyk on Apr 21, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). Although d2lang.com appears to be the official site for the D2 project, the URL points to a raw install.sh intended to be piped to a shell — running unreviewed remote shell scripts is inherently risky and can be used to distribute malware.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata