svelte-cli

Fail

Audited by Snyk on Aug 26, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The skill documentation contains guidance that weakens security boundaries (e.g., advising to disable TLS verification and enabling a devtools plugin that grants browsers read/write access to project files), which is suspicious steering without clear malicious intent.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 26, 2026, 04:35 AM
Issues
1
Security Audit — snyk — svelte-cli