file-to-markdown
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [External Dependencies]: The skill provides instructions for downloading Apache Tika and a Java Runtime Environment from recognized sources (Apache and Adoptium). These are essential for the skill's operation, and the documentation emphasizes obtaining user consent before any installation.
- [Indirect Prompt Injection]: As a file-parsing utility, the skill processes untrusted external data (documents, emails, archives) which might contain instructions aimed at the AI agent. The skill addresses this by recommending the use of structured 'rmeta' output, which provides better boundaries and metadata visibility to help isolate content from the agent's instructions.
Audit Metadata