convert-epub
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from EPUB files and incorporates the result into the agent's context, creating a surface for malicious instructions to be executed by the model. * Ingestion points: The skill reads EPUB content from the file path provided in the first argument. * Boundary markers: No delimiters or warnings are used to instruct the agent to ignore any commands embedded in the converted text. * Capability inventory: The skill has access to Bash, Read, and Write tools, which could be misused if the agent follows injected instructions. * Sanitization: The skill does not perform any sanitization or validation of the extracted text.
- [EXTERNAL_DOWNLOADS]: The skill ensures the installation of an external package at runtime. * Details: It uses a helper skill to install the epub-to-markdown package. While this is a standard utility for the task, the installation is unversioned.
Audit Metadata