markdown-to-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL runtime path scripts/md2pdf.mjs: the agent renders outsider-supplied Markdown files by reading file contents (fs.readFileSync(file,'utf8')), converting them to HTML (md.render(markdown)), and then loading that HTML in a file:// page via page.goto.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill auto-runs npm install at runtime (see scripts/md2pdf.mjs calling execSync('npm install'') which will fetch and install packages from the npm registry — e.g. https://registry.npmjs.org/mermaid/-/mermaid-10.9.6.tgz — and those packages are then imported and executed by the skill.