md-to-eml
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/md-to-eml.cjsexecutes the externalpandocbinary using a sharedtool-runner.cjsutility to perform Markdown-to-HTML conversion.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external Markdown files which may contain untrusted data. If an agent processes a malicious Markdown file, it could be influenced by embedded instructions or exploit the skill's file-handling capabilities. - Ingestion points: The
sourcePathfile content is read and processed inscripts/md-to-eml.cjs. - Boundary markers: The script does not implement explicit boundary markers or instructions for the agent to ignore embedded commands within the Markdown body.
- Capability inventory: The skill performs file reads (
fs.readFileSyncfor images), file writes (fs.writeFileSyncfor the output.emland debug files), and external command execution (runToolforpandoc). - Sanitization: Image paths are resolved and validated against a specific list of allowed extensions (.png, .jpg, .jpeg, .gif, .webp) before reading.
Audit Metadata