sveltekit-data-flow

Fail

Audited by Snyk on May 17, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (medium risk: 0.60). The prompt includes hidden meta-instructions in an HTML comment (progressive-disclosure and "LLM WORKFLOW" steps like running npx skills add) that are outside the stated SvelteKit data-flow guidance and thus constitute hidden/deceptive instructions to an LLM.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
May 17, 2026, 07:19 PM
Issues
1
Security Audit — snyk — sveltekit-data-flow