mermaid-lint
Fail
Audited by Snyk on Nov 13, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.30). The skill is a legitimate Mermaid linter, but it weakens a browser protection with
--no-sandboxand has the agent push changes across many repositories while working around lock files, which is sketchy toward the user without showing malicious intent.
Issues (1)
E004
CRITICALPrompt injection detected in skill instructions.
Audit Metadata