·
Last changedVersion:
This version passed the hardening gate. Hardening applied 3 targeted changes and preserved all other text. Classified findings before hardening: 3. Classified findings closed: 0. Classified findings remaining: 3. Unclassified scanner findings remaining: 0. Review findings closed: 3. Review findings remaining: 12.
1
2
1
2
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
SKILL.md | Malicious Code & Command Execution | — | Low | Open | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Open |
3 findings
You have access to @sveltejs/mcp CLI for Svelte-specific assistance. Use these commands via npx:
Lists all available Svelte 5 and SvelteKit documentation sections with titles and paths.
Retrieves full documentation for specified sections. Use after list-sections to fetch relevant docs.
Example:
Analyzes Svelte code and suggests fixes for common issues.
Options:
--async - Enable async Svelte mode (default: false)--svelte-version - Target version, ideally the full version from package.json (e.g. 5.16.0) so version-specific suggestions are enabled. The major must be 4 or 5 (default: 5)Examples:
Important: When passing code with runes ($state, $derived, etc.) via the terminal, escape the $ character as \$ to prevent shell variable substitution.
list-sections then get-documentation for relevant topicssvelte-autofixer on the code to detect issuessvelte-autofixer before finalizing any Svelte componentGet started with chainctlchainctl skill install public/sveltejs/opencode-svelte-code-writer:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/sveltejs/packages/opencode/skills/svelte-code-writer:latest
MIT
HARDENING.md
LICENSE
SKILL.md