md2idx-read
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/md2idx-run.shscript usesnpx -y md2idxto download and execute themd2idxpackage from the public npm registry if it is not already available locally or in the environment path. - [COMMAND_EXECUTION]: The skill requires permission to run a bundled shell script,
scripts/md2idx-run.sh, which executes system commands likewc,jq, and themd2idxtool to process Markdown files and extract content. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it reads and processes external Markdown files that could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Data is ingested from external Markdown files located on the local file system through the
md2idxtool or fallback methods usinggrepand theReadtool. - Boundary markers: The skill does not implement specific boundary markers or instructions to the agent to ignore embedded commands within the retrieved Markdown sections.
- Capability inventory: The agent has access to file system read operations and shell execution via the provided wrapper script.
- Sanitization: No validation or sanitization of the file content is performed prior to presenting it to the agent's context.
Audit Metadata