baoyu-format-markdown
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local TypeScript entry point (
scripts/main.ts) to manage the formatting workflow. It also invokes theautocorrect-nodeutility via a system subprocess (spawnSync) to apply typography rules to the document. These are intended behaviors for the skill's formatting purpose. - [EXTERNAL_DOWNLOADS]: The skill uses the
bunruntime and references theautocorrect-nodepackage. These are standard tools typically fetched from the official npm registry during execution or setup. - [PROMPT_INJECTION]: The skill processes user-provided markdown or plain text files to perform content analysis and formatting. This ingestion of untrusted data creates a potential surface for indirect prompt injection.
- Ingestion points: User-specified files are read and analyzed in Steps 1 and 2 of the workflow.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the processed files.
- Capability inventory: The skill performs file system writes (
writeFileSyncinscripts/main.ts) and executes system commands (spawnSyncinscripts/autocorrect.ts). - Sanitization: No explicit sanitization or filtering of the input file content is performed prior to analysis.
Audit Metadata