sveltekit-remote-functions
Fail
Audited by Snyk on Feb 15, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 0.80). Yes — an HTML-commented "LLM WORKFLOW" and disclosure guidelines embed hidden instructions (e.g., run claude-skills-cli validate/doctor, edit SKILL.md) that are outside the published SvelteKit guidance and are concealed, so this is a prompt injection.
Audit Metadata