markdown-to-html
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The generated HTML output references external resources from well-known services. It fetches Chinese web fonts from Google Fonts and the Mermaid.js library from the jsdelivr CDN to render diagrams at view time.
- [COMMAND_EXECUTION]: The core script
scripts/md_to_html.pyperforms file system operations, reading a Markdown file and writing the resulting HTML to disk based on user-provided paths. These operations are standard for the tool's intended purpose. - [DATA_EXFILTRATION]: No data exfiltration was detected. The Python script does not perform network operations, and the JavaScript included in the generated HTML processes content locally within the user's browser without sending data to external servers.
- [SAFE]: The skill follows security best practices by escaping metadata fields using HTML entities and implementing the Mermaid diagram engine with a 'strict' security level.
Audit Metadata