sveltekit-data-flow

Fail

Audited by Snyk on Feb 24, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 1.00). The file contains hidden HTML comments with "PROGRESSIVE DISCLOSURE GUIDELINES" and an "LLM WORKFLOW" giving step-by-step LLM/editor instructions (e.g., run claude-skills-cli) that are hidden and unrelated to the SvelteKit data-flow guidance.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 24, 2026, 05:26 PM