markdown-mdx-content-pipeline-weapon
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The documentation describes using command-line tools such as Playwright (
npx playwright install chromium) to support server-side diagram rendering in specific CI or build environments. - [EXTERNAL_DOWNLOADS]: The skill provides examples for integrating styles and scripts from well-known services, including the KaTeX and Mermaid.js libraries hosted on the JSDelivr CDN (cdn.jsdelivr.net).
- [SAFE]: The skill maintains an excellent security posture by dedicating significant content to XSS sanitization. It provides clear directives on the mandatory use of
rehype-sanitizefor user-generated content and provides safe implementation patterns for both server-side and client-side rendering. Potential risks such as dynamic code execution are appropriately scoped to developer-controlled build pipelines.
Audit Metadata