d2-diagrams
Fail
Audited by Snyk on Aug 9, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.80). The presence of a direct curl|sh installer (https://d2lang.com/install.sh) is a high-risk distribution pattern because it fetches and executes a script from a remote host; the other URLs are static icons or documentation and are low-risk.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata