lovpen-cli
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/run_lovpen_cli.pyis used to invoke thelovpen-clibackend. The implementation uses the Pythonsubprocess.runfunction withshell=False, which correctly avoids shell injection risks by passing arguments as an array. - [EXTERNAL_DOWNLOADS]: The skill documented requirements for external tools such as Node.js, Python, and a Chromium-based browser. It also relies on the local installation of the
lovpen-clipackage to perform its primary rendering tasks. - [INDIRECT_PROMPT_INJECTION]: The skill processes external Markdown data provided by the user, which presents a surface for indirect prompt injection.
- Ingestion points: Markdown input file content is processed by the renderer in
scripts/run_lovpen_cli.pyvia therendercommand. - Boundary markers: There are no explicit boundary markers or "ignore instructions" delimiters used when passing the file content or paths to the CLI.
- Capability inventory: The skill has the capability to read and write to the local filesystem and execute the
lovpen-clisubprocess. - Sanitization: Input parameters are handled as distinct arguments in a list, preventing command-string manipulation at the shell level.
Audit Metadata