md-to-office
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides Python examples that use the
subprocessmodule to execute thepandocsystem command. This is consistent with its stated purpose of document conversion. - [EXTERNAL_DOWNLOADS]: The documentation includes standard installation instructions for the
pandocutility via system package managers (Homebrew, Apt, Chocolatey) and thepypandocPython library via Pip. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process Markdown content which may originate from untrusted sources.
- Ingestion points: Markdown content provided via user prompts or file reads.
- Boundary markers: None present in the provided instructions.
- Capability inventory: File system writes via Python
open(), file deletion viaos.remove(), and shell command execution viasubprocess.run(['pandoc', ...]). - Sanitization: None specified for the input Markdown content.
Audit Metadata