d2-diagrams

Fail

Audited by Snyk on Aug 9, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.80). The presence of a direct curl|sh installer (https://d2lang.com/install.sh) is a high-risk distribution pattern because it fetches and executes a script from a remote host; the other URLs are static icons or documentation and are low-risk.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 9, 2026, 08:37 PM
Issues
1
Security Audit — snyk — d2-diagrams