sveltekit-data-flow
Fail
Audited by Snyk on May 17, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (medium risk: 0.60). The prompt includes hidden meta-instructions in an HTML comment (progressive-disclosure and "LLM WORKFLOW" steps like running npx skills add) that are outside the stated SvelteKit data-flow guidance and thus constitute hidden/deceptive instructions to an LLM.
Issues (1)
E004
CRITICALPrompt injection detected in skill instructions.
Audit Metadata