markitdown
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the 'markitdown' Python package, which is a tool from Microsoft used for document conversion.
- [INDIRECT_PROMPT_INJECTION]: By processing external files such as PDF, Word, and Excel documents as well as URLs, the skill exposes the agent to potential indirect prompt injection from content contained within those documents.
- [COMMAND_EXECUTION]: The skill uses the 'Bash' tool to execute document conversion commands, which involves reading local files and accessing external URLs to fetch content.
Audit Metadata