d2-config

Fail

Audited by Snyk on Apr 21, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.70). Although d2lang.com appears to be the official site for the D2 project, the URL points to a raw install.sh intended to be piped to a shell — running unreviewed remote shell scripts is inherently risky and can be used to distribute malware.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Apr 21, 2026, 09:12 AM
Issues
1
Security Audit — snyk — d2-config