exporting-test-cases-to-xmind
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
md_to_xmind.py) to process test case files. This is the primary, intended function of the skill and involves standard file-handling operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied Markdown files which constitute an attack surface for indirect instructions.
- Ingestion point: Input Markdown files specified by the user are read by the
convertfunction inscripts/md_to_xmind.py. - Capability inventory: The script has the capability to read local files and write
.xmind(ZIP-compressed JSON) files to the local file system. - Sanitization: The script uses standard
json.dumpsto serialize the output content, which ensures the resulting XMind file structure is safe from basic injection attacks within the generated file itself.
Audit Metadata