markdown-to-epub-converter
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied markdown content which is converted into HTML/XHTML for an EPUB document. While the skill performs basic HTML escaping for characters like
<,>, and&, it does not sanitize or validate link URLs in the markdown syntax, which could allow the insertion of malicious attributes or protocols into the generated EPUB file. - Ingestion points:
MarkdownProcessor.process(inscripts/markdown_processor.py) accepts raw markdown content from the agent or user. - Boundary markers: None identified; content is processed directly.
- Capability inventory: The skill writes EPUB files to the local file system using
EPUBGenerator._write_epub(inscripts/epub_generator.py). - Sanitization: Basic HTML escaping is performed in
MarkdownProcessor._render_inline, but it lacks robust sanitization for link attributes.
Audit Metadata