textavia-markdown-table-tools
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
txvandtextaviaCLI tools to perform table conversions and creation tasks locally on the user's machine. - [EXTERNAL_DOWNLOADS]: The instructions suggest using
npx textaviaas a fallback, which may download thetextaviapackage from the public npm registry if not already present in the environment. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes untrusted external files (CSV, JSON, and Markdown). It lacks explicit instructions for the agent to use boundary markers or to ignore instructions embedded within the processed data files, though this is a common characteristic of data processing tools.
Audit Metadata