markitdown-cli
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
markitdowncommand-line utility to convert local document files such as PDFs and Office documents into Markdown. - [EXTERNAL_DOWNLOADS]: Refers the agent to the official Microsoft MarkItDown GitHub repository for installation instructions. This is a reference to a well-known technology provider and is considered a safe resource.
- [PROMPT_INJECTION]: The skill facilitates the processing of untrusted documents which may contain malicious instructions intended to influence the AI agent's behavior (indirect prompt injection).
- Ingestion points: Processes local document files (PDF, DOCX, HTML, text) in
SKILL.md. - Boundary markers: Absent; the skill does not define specific delimiters or instructions to isolate converted content from the agent's control logic.
- Capability inventory: The agent has the capability to read input files and write output Markdown files via the CLI tool invocation.
- Sanitization: No automated sanitization is described; the instructions rely on the agent to spot-check the converted output for structural issues.
Audit Metadata