markdown-converter
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes various untrusted file formats (PDF, Office documents, ZIP, etc.) to convert them to Markdown. Maliciously crafted documents could contain instructions intended to influence the agent's behavior.
- Ingestion points: Processes external files through the
markitdownutility (SKILL.md). - Boundary markers: No specific delimiters or instructions are provided to the agent to treat the converted content as data rather than instructions.
- Capability inventory: The agent has access to the
Bashtool, allowing for command execution based on processed content. - Sanitization: Does not include explicit sanitization of the extracted text before it is returned to the agent context.
- [EXTERNAL_DOWNLOADS]: The skill uses
uvxorpipxto download and run themarkitdownpackage from the Python Package Index (PyPI).markitdownis an official Microsoft open-source project. - [COMMAND_EXECUTION]: The skill instructs the agent to use the
Bashtool to execute conversion commands and suggests usingpdftoppmfor handling scanned PDFs.
Audit Metadata