gitlab-flavored-markdown

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/render.py utility invokes external binaries such as pandoc or cmark-gfm using subprocess.run. The command is constructed as a list of arguments, which prevents shell injection vulnerabilities. The script also allows for tool path configuration via environment variables, which is a standard pattern for developer tools.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and installation pages for GitLab, GitHub, and Pandoc. These are well-known and trusted services, and the references are provided for informational and setup purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 03:00 AM
Security Audit — agent-trust-hub — gitlab-flavored-markdown