Skills
Navigate
skills/makerjackie/jackie-skills-starter/baoyu-markdown-to-html/Gen Agent Trust Hub

baoyu-markdown-to-html

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses node:child_process.spawnSync to execute its internal rendering script via npx. This is used to orchestrate the conversion process between the entry point and the core markdown processor.
  • [REMOTE_CODE_EXECUTION]: Dynamically imports syntax highlighting language definitions from a remote source (https://cdn-doocs.oss-cn-shenzhen.aliyuncs.com/npm/highlightjs/) using JavaScript's import() function. This enables the skill to support a wide range of code block languages at runtime.
  • [EXTERNAL_DOWNLOADS]:
  • Automatically downloads remote images referenced in the markdown content using the http and https modules to facilitate local processing and HTML embedding.
  • Fetches rendered diagram images from the official PlantUML server at https://www.plantuml.com/plantuml.
  • [DATA_EXFILTRATION]: (Informational) Sends the contents of PlantUML code blocks to the external PlantUML service for rendering. This is the intended behavior for the diagram generation feature.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 02:57 AM
Security Audit — agent-trust-hub — baoyu-markdown-to-html