markdown-converter
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uvxorpipx runto download and execute themarkitdownpackage from Microsoft. - [COMMAND_EXECUTION]: Utilizes the
Bashtool to execute conversion commands for various file formats. - [PROMPT_INJECTION]: The skill processes content from external files (PDF, DOCX, HTML, etc.), which creates an indirect prompt injection surface where malicious instructions could be embedded in the data.
- Ingestion points: Document files processed via the
markitdownutility as specified in SKILL.md. - Boundary markers: None identified.
- Capability inventory: File reading and shell command execution using the
BashandReadtools. - Sanitization: None specified for external content.
Audit Metadata