md-document
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The rendering core implements a security-first design by HTML-escaping all input text before markdown patterns are applied, which effectively neutralizes cross-site scripting (XSS) and injection attacks.
- [SAFE]: A strict allowlist for link and image schemes (http, https, mailto, and relative paths) is enforced by the rendering module, blocking dangerous protocols such as javascript: or data: URLs.
- [SAFE]: Analysis of the Python scripts confirms the tool relies exclusively on built-in libraries and performs no network communication, ensuring data remains within the local environment.
- [SAFE]: No evidence of code obfuscation, unauthorized privilege escalation, or persistence mechanisms was found in the provided scripts, assets, or metadata.
Audit Metadata