github-flavored-markdown

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE

Full Analysis

[COMMAND_EXECUTION]: The script scripts/render.py executes external rendering tools (cmark-gfm or pandoc) using the subprocess module. This is the primary function of the skill and is implemented following security best practices by passing arguments as a list rather than using a shell, which prevents common command injection vulnerabilities. Environment variable overrides for tool paths are checked for existence before use.

Audit Metadata

Risk Level

SAFE

Analyzed

Jul 9, 2026, 03:00 AM

Security Audit — agent-trust-hub — github-flavored-markdown