markdown-converter
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uvx markitdownto fetch and run the 'markitdown' package. This package is an official tool from Microsoft, which is a well-known and trusted source for software development tools. - [COMMAND_EXECUTION]: The instructions describe using the shell to execute file conversion commands. This is the primary and intended function of the skill, providing a wrapper for the conversion utility.
- [PROMPT_INJECTION]: The skill processes external data such as PDFs, Word documents, and YouTube URLs to convert them to text.
- Ingestion points: Local files and external URLs provided as arguments to the
uvx markitdowncommand. - Boundary markers: Not explicitly defined in the conversion instructions.
- Capability inventory: The skill can read local files and write output to the file system using shell redirection or the
-oflag. - Sanitization: Content processing is handled internally by the underlying Microsoft MarkItDown library.
Audit Metadata