sveltekit-remote-functions
Fail
Audited by Snyk on Apr 26, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 0.70). The file contains an HTML comment with hidden "PROGRESSIVE DISCLOSURE GUIDELINES" and an "LLM WORKFLOW" (e.g., commands and edit/run steps) that are not part of SvelteKit guidance and could secretly direct an agent, so it is a hidden/out‑of‑scope instruction.
Issues (1)
E004
CRITICALPrompt injection detected in skill instructions.
Audit Metadata