d2-convert
Fail
Audited by Snyk on Apr 21, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). This skill copies Mermaid diagram content (labels, messages, headers) directly into generated D2 output and prompts the user to paste input, so any API keys, tokens, or passwords present in the diagram would be echoed verbatim and could be exfiltrated.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata