pdf-to-md

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the markitdown package from Microsoft's official repository via PyPI. It also references the opendataloader-pdf repository for specialized PDF processing.
  • [COMMAND_EXECUTION]: Utilizes the Bash tool to execute document conversion commands and install necessary Python dependencies. The script uses proper variable quoting to handle file paths safely.
  • [PROMPT_INJECTION]: The skill processes external, untrusted document content which presents a surface for indirect prompt injection.
  • Ingestion points: Input file path ($1) containing content from documents like PDFs or DOCX files.
  • Boundary markers: Not explicitly defined in the conversion workflow.
  • Capability inventory: Uses the Bash tool to run CLI applications and file system operations (markitdown, opendataloader, test, wc).
  • Sanitization: No specific sanitization or filtering of the document content is performed before conversion.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 08:58 AM
Security Audit — agent-trust-hub — pdf-to-md