md2html
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The conversion process is handled by a Bash script
scripts/md2html.shthat executes a Python interpreter using a heredoc to process file contents. The script uses standard file-handling arguments for input and output paths.- [EXTERNAL_DOWNLOADS]: The skill documentation indicates a dependency on themarkdownPython package, which is a well-known library for Markdown processing. Installation viapipis standard for this type of utility.- [INDIRECT_PROMPT_INJECTION]: The skill acts on user-provided or workspace-local Markdown files. While it parses untrusted content into HTML, the operation is local and static. - Ingestion points: The
scripts/md2html.shscript accepts input file paths as the first command-line argument. - Boundary markers: None identified within the script logic.
- Capability inventory: The script performs file read/write operations and shell command execution.
- Sanitization: Content is processed through the standard Python
markdownlibrary; the script does not perform additional HTML sanitization (e.g., stripping<script>tags).
Audit Metadata