convert-documents-to-markdown
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads and executes the
@firecrawl/anydocpackage from the NPM registry vianpx. It also references library versions available on PyPI (firecrawl-anydoc) and crates.io (anydoc).- [COMMAND_EXECUTION]: Runs theanydocCLI to convert files, with support for reading from stdin and writing to output files.- [INDIRECT_PROMPT_INJECTION]: Processes untrusted external files (e.g., PDFs and office documents), which is a standard surface for indirect prompt injection. - Ingestion points: File paths and stdin content processed by the conversion tool.
- Boundary markers: The instructions do not specify boundary markers to isolate the converted content from the agent's instructions.
- Capability inventory: The tool has the capability to read files and write output to the local file system.
- Sanitization: The skill does not describe specific sanitization steps for the converted markdown content.
Audit Metadata