markdown-novel-viewer
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The server utilizes execSync to automatically open the system's default browser to the application's local URL upon startup. The command string is constructed using URI-encoded components to mitigate shell injection risks.
- [EXTERNAL_DOWNLOADS]: The application fetches CSS and JavaScript from well-known and reputable content delivery networks (cdnjs.cloudflare.com and cdn.jsdelivr.net) to enable syntax highlighting and Mermaid diagram support.
- [SAFE]: The HTTP server implements path validation checks that restrict file access to authorized directories, such as the current working directory and the folder containing the file being viewed, protecting against directory traversal attacks.
Audit Metadata