mermaid-lint

Fail

Audited by Snyk on Nov 13, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.30). The skill is a legitimate Mermaid linter, but it weakens a browser protection with --no-sandbox and has the agent push changes across many repositories while working around lock files, which is sketchy toward the user without showing malicious intent.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Nov 13, 2026, 05:40 AM
Issues
1