xmindify
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
xmindmarkcommand-line tool directly and through a provided shell scriptscripts/convert.shto transform markdown-like structures into mind map files. - [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install the
xmindmarkutility globally usingnpmorpnpmfrom the official registry. - [PROMPT_INJECTION]: The skill processes user-supplied content (such as papers or summaries) to generate XMindMark files, which creates an indirect prompt injection surface.
- Ingestion points: User-provided text or documents used as source material for the mind maps.
- Boundary markers: The skill uses template-based markdown code blocks to structure the output and minimize instruction leakage.
- Capability inventory: Subprocess execution via
scripts/convert.shand thexmindmarkCLI. - Sanitization: No explicit input validation or sanitization of the user-provided text is performed before it is formatted into the XMindMark file.
Audit Metadata