write-run-markdown-lint
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and executemarkdownlint-cli2@0.18.1from the npm registry if the tool is not found on the system's PATH. The tool version is pinned to a specific release. - [COMMAND_EXECUTION]: The skill executes a bundled shell script (
scripts/lint.sh) to perform linting and optionally invokes a Python script from a neighboring skill (write-status/scripts/article_status.py) to record activity logs. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes the content of user-provided Markdown files at runtime.
- Boundary markers: None are present for the Markdown content itself.
- Capability inventory: Shell script execution, Node.js execution (via npx), and Python script execution.
- Sanitization: Linter output is processed using
grepandsedwithin the shell script to format the findings before they are presented to the agent.
Audit Metadata