mdadf-cli
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads installation scripts and binaries directly from the official GitHub repository of the author, 'chenhunghan'. Specifically, it fetches 'install.sh' and 'install.ps1' from
https://raw.githubusercontent.com/chenhunghan/mdadf/main/. As these resources belong to the vendor's own infrastructure and are required for the primary function of the skill, they are considered standard operational behavior. - [REMOTE_CODE_EXECUTION]: The skill provides commands to pipe remote installation scripts directly into a shell interpreter (e.g.,
curl ... | shandirm ... | iex). While this is a sensitive pattern, it is used here specifically for the purpose of installing the vendor's own 'mdadf' tool from their verified GitHub repository. - [COMMAND_EXECUTION]: The skill facilitates the execution of terminal commands to verify tool installation (
mdadf --version) and perform document conversion (mdadf <file> --compact). These commands are scoped to the intended functionality of the CLI tool.
Audit Metadata