markdown-converter

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes various untrusted file formats (PDF, Office documents, ZIP, etc.) to convert them to Markdown. Maliciously crafted documents could contain instructions intended to influence the agent's behavior.
  • Ingestion points: Processes external files through the markitdown utility (SKILL.md).
  • Boundary markers: No specific delimiters or instructions are provided to the agent to treat the converted content as data rather than instructions.
  • Capability inventory: The agent has access to the Bash tool, allowing for command execution based on processed content.
  • Sanitization: Does not include explicit sanitization of the extracted text before it is returned to the agent context.
  • [EXTERNAL_DOWNLOADS]: The skill uses uvx or pipx to download and run the markitdown package from the Python Package Index (PyPI). markitdown is an official Microsoft open-source project.
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the Bash tool to execute conversion commands and suggests using pdftoppm for handling scanned PDFs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 01:18 PM