baoyu-format-markdown

Fail

Audited by Snyk on Feb 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). The code is mostly benign text-processing, but it invokes a shell via execSync to run "npx autocorrect-node --fix " which can perform network installs and execute arbitrary third‑party code and is also vulnerable to command‑injection if the file path is crafted — representing a high supply‑chain / remote code execution risk.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 16, 2026, 04:00 AM