markitdown-setup

Warn

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: MEDIUMDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file uses the dynamic context syntax (!) to execute scripts/setup.sh immediately upon the skill being loaded or viewed. This allows the skill to perform system changes before the user explicitly grants permission for a specific action.
  • [EXTERNAL_DOWNLOADS]: The scripts/setup.sh script executes pip install markitdown-mcp, which downloads and installs a package from the public Python Package Index (PyPI).
  • [COMMAND_EXECUTION]: The setup script executes multiple shell commands to modify the system state, including claude mcp add to register new tools and directory creation via mkdir -p.
  • [DYNAMIC_EXECUTION]: The setup script contains an embedded Python script (via heredoc) that is executed at runtime to parse and modify the $HOME/.codex/config.yaml configuration file.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 14, 2026, 03:45 PM