baoyu-format-markdown
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The code is mostly benign text-processing, but it invokes a shell via execSync to run "npx autocorrect-node --fix " which can perform network installs and execute arbitrary third‑party code and is also vulnerable to command‑injection if the file path is crafted — representing a high supply‑chain / remote code execution risk.
Audit Metadata