baoyu-format-markdown

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local TypeScript scripts using the Bun or npx runtime to perform its formatting logic. It also spawns a subprocess to run the 'autocorrect-node' utility for CJK text spacing, which is a standard procedure for this type of document tool.\n- [EXTERNAL_DOWNLOADS]: The skill depends on several industry-standard Node.js packages for markdown parsing and manipulation, which are fetched from the official npm registry. These dependencies are consistent with the skill's functionality.\n- [PROMPT_INJECTION]: The skill analyzes and formats user-provided text files. It mitigates risks associated with processing untrusted input by utilizing structural AST (Abstract Syntax Tree) parsing through the Unified and Remark ecosystems, ensuring that input is treated as data rather than executable instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 08:05 AM
Security Audit — agent-trust-hub — baoyu-format-markdown