baoyu-markdown-to-html

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local TypeScript entry point (scripts/main.ts) using the bun runtime or npx. This is the core mechanism used to perform the document conversion.
  • [EXTERNAL_DOWNLOADS]: When processing markdown, the skill identifies remote image URLs and downloads them to a temporary directory using the resolveContentImages function from the baoyu-md library. This allows the converter to include these images in the final generated HTML document.
  • [SAFE]: The skill performs standard file system operations, such as reading configuration from designated user directories (e.g., $HOME/.baoyu-skills/) and writing output files to the same directory as the input markdown. It also implements a backup mechanism that renames existing HTML files before overwriting them.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 08:18 AM
Security Audit — agent-trust-hub — baoyu-markdown-to-html