skills/jssfy/k-skills/md2html/Gen Agent Trust Hub

md2html

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The conversion process is handled by a Bash script scripts/md2html.sh that executes a Python interpreter using a heredoc to process file contents. The script uses standard file-handling arguments for input and output paths.- [EXTERNAL_DOWNLOADS]: The skill documentation indicates a dependency on the markdown Python package, which is a well-known library for Markdown processing. Installation via pip is standard for this type of utility.- [INDIRECT_PROMPT_INJECTION]: The skill acts on user-provided or workspace-local Markdown files. While it parses untrusted content into HTML, the operation is local and static.
  • Ingestion points: The scripts/md2html.sh script accepts input file paths as the first command-line argument.
  • Boundary markers: None identified within the script logic.
  • Capability inventory: The script performs file read/write operations and shell command execution.
  • Sanitization: Content is processed through the standard Python markdown library; the script does not perform additional HTML sanitization (e.g., stripping <script> tags).
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 08:14 AM