quarto-authoring
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for extending Quarto functionality using the
quarto addcommand, which downloads and installs extensions from GitHub repositories. - Evidence:
references/extensions.mdandreferences/conversion-blogdown.mdsuggest installing extensions from sources such asquarto-ext/fontawesome,shafayetShafee/bsicons,gadenbuie/quarto-social-embeds, and others. - Context: This is the standard, documented method for extending the Quarto CLI. The official Quarto extension organization (
quarto-ext) and prominent community contributors are referenced. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on how to process, render, and convert Quarto documents (
.qmd), R Markdown documents (.Rmd), and Jupyter notebooks (.ipynb). These files are user-provided and could potentially contain malicious instructions meant to influence the agent's behavior during the authoring or rendering process. - Ingestion points: The agent is instructed to read and work with
.qmd,.Rmd, and.ipynbfiles as part of the primary authoring tasks. - Boundary markers: The skill does not explicitly define boundary markers or instruct the agent to ignore instructions embedded within the data it processes.
- Capability inventory: The skill utilizes capabilities including file system access (reading/writing documents), shell command execution (
quarto render,quarto convert,quarto add), and network operations (extension installation). - Sanitization: No specific sanitization or validation logic for the content of the markdown files is provided in the instructions, relying on standard agent guardrails.
Audit Metadata