skills/phil-fan/xmindify/xmindify/Gen Agent Trust Hub

xmindify

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the xmindmark command-line tool directly and through a provided shell script scripts/convert.sh to transform markdown-like structures into mind map files.
  • [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install the xmindmark utility globally using npm or pnpm from the official registry.
  • [PROMPT_INJECTION]: The skill processes user-supplied content (such as papers or summaries) to generate XMindMark files, which creates an indirect prompt injection surface.
  • Ingestion points: User-provided text or documents used as source material for the mind maps.
  • Boundary markers: The skill uses template-based markdown code blocks to structure the output and minimize instruction leakage.
  • Capability inventory: Subprocess execution via scripts/convert.sh and the xmindmark CLI.
  • Sanitization: No explicit input validation or sanitization of the user-provided text is performed before it is formatted into the XMindMark file.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 04:35 AM
Security Audit — agent-trust-hub — xmindify