skills/rheinmir/setup/md-to-html/Gen Agent Trust Hub

md-to-html

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety guidelines, or extract system prompts were detected in the instructions.
  • [DATA_EXFILTRATION]: No network operations, hardcoded credentials, or access to sensitive environment/configuration files were found.
  • [COMMAND_EXECUTION]: The skill does not contain any shell commands, subprocess spawning, or privilege escalation attempts.
  • [EXTERNAL_DOWNLOADS]: No external scripts, remote code, or third-party packages are downloaded or executed.
  • [DATA_EXPOSURE]: The skill writes output to a local html/ directory and updates a local llmwiki/ directory. This behavior is consistent with the stated purpose of generating documentation and maintaining an activity log.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests Markdown data and generates HTML (a potential attack surface for XSS if the output is viewed in a browser), it does not include instructions that would lead to agent misbehavior or unauthorized actions. The instructions focus on CSS styling and metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 04:17 PM
Security Audit — agent-trust-hub — md-to-html