markstream-install
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing various NPM packages associated with the 'Markstream' ecosystem, including framework-specific renderers like
markstream-vue,markstream-react,markstream-svelte,markstream-angular, andmarkstream-vue2. - [EXTERNAL_DOWNLOADS]: The instructions list several peer dependencies and optional features that require additional packages such as
mermaid,katex,stream-markdown,stream-diffs,stream-monaco,@terrastruct/d2, and@antv/infographic. - [COMMAND_EXECUTION]: The workflow includes standard package manager commands (e.g.,
npm install) to integrate these libraries into a host application. - [SAFE]: The skill explicitly instructs the agent to preserve safe security defaults, specifically stating that the HTML policy should default to 'safe' and Mermaid should use 'strict mode' to prevent potential vulnerabilities like XSS when rendering untrusted content.
Audit Metadata