markitdown
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
markitdownandmarkitdown-mcppackages from the official Python package registry. These tools are from a well-known technology provider and are used for their primary intended purpose. \n- [COMMAND_EXECUTION]: The skill utilizes Bash for command-line conversion and batch processing. The provided scripts correctly use double-quotes for variable expansion to prevent shell injection from special characters in filenames. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes external file formats (PDF, Word, Excel, etc.) which constitutes an ingestion point for untrusted data. While the skill includes data protection rules and local anonymization guidelines, the conversion of untrusted documents presents a surface where hidden malicious instructions could be embedded in the source files.
Audit Metadata