mermaid-diagram-generator

Fail

Audited by Snyk on Feb 15, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.70). The prompt contains an out-of-scope instruction to "Document learnings and suggest improvements" into a specific local file path (~/.amplihack/.claude/context/DISCOVERIES.md), which goes beyond the skill's stated purpose of generating Mermaid diagrams and could be used to persist or exfiltrate data.
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 15, 2026, 08:35 PM