convert-excel-to-md
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the 'markitdown' Python package (provided by Microsoft) for its core functionality. Installation is performed via standard package managers as documented in the setup guide.\n- [PROMPT_INJECTION]: The skill creates an indirect prompt injection surface by processing untrusted Excel data and converting it into Markdown for agent consumption.\n
- Ingestion points: Processes .xlsx files through the scripts/convert_excel_to_md.py script.\n
- Boundary markers: No specific delimiters are used in the Markdown output to isolate converted content.\n
- Capability inventory: Limited to file system operations (read/write) without network or shell execution capabilities.\n
- Sanitization: Relies on the markitdown library for conversion; no explicit scanning of cell content for injection patterns is performed.
Audit Metadata