lovstudio-any2pdf
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches Twemoji assets from Cloudflare's CDN (cdnjs.cloudflare.com) to support emoji rendering in PDF documents.
- [EXTERNAL_DOWNLOADS]: The Python script
md2pdf.pyperforms network requests usingurllib.requestto download remote images referenced within the input Markdown documents for inclusion in the PDF. - [COMMAND_EXECUTION]: The skill instructions provide the agent with specific shell commands to execute the Python-based conversion script and uses the Pandoc engine as a fallback for complex document structures.
- [SAFE]: The font discovery system implementation searches for standard system fonts across macOS, Windows, and Linux to ensure proper typography without accessing sensitive user directories.
- [SAFE]: Input handling and pre-processing logic (such as YAML frontmatter parsing and heading normalization) are implemented using standard regular expressions and string manipulations without dynamic execution of untrusted content.
Audit Metadata