pdf-to-md
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
markitdownpackage from Microsoft's official repository via PyPI. It also references theopendataloader-pdfrepository for specialized PDF processing. - [COMMAND_EXECUTION]: Utilizes the Bash tool to execute document conversion commands and install necessary Python dependencies. The script uses proper variable quoting to handle file paths safely.
- [PROMPT_INJECTION]: The skill processes external, untrusted document content which presents a surface for indirect prompt injection.
- Ingestion points: Input file path (
$1) containing content from documents like PDFs or DOCX files. - Boundary markers: Not explicitly defined in the conversion workflow.
- Capability inventory: Uses the
Bashtool to run CLI applications and file system operations (markitdown,opendataloader,test,wc). - Sanitization: No specific sanitization or filtering of the document content is performed before conversion.
Audit Metadata