markitdown-setup
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile uses the dynamic context syntax (!) to executescripts/setup.shimmediately upon the skill being loaded or viewed. This allows the skill to perform system changes before the user explicitly grants permission for a specific action. - [EXTERNAL_DOWNLOADS]: The
scripts/setup.shscript executespip install markitdown-mcp, which downloads and installs a package from the public Python Package Index (PyPI). - [COMMAND_EXECUTION]: The setup script executes multiple shell commands to modify the system state, including
claude mcp addto register new tools and directory creation viamkdir -p. - [DYNAMIC_EXECUTION]: The setup script contains an embedded Python script (via heredoc) that is executed at runtime to parse and modify the
$HOME/.codex/config.yamlconfiguration file.
Audit Metadata