markdown-to-pdf
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill operates entirely locally on user-provided input.\n- [COMMAND_EXECUTION]: The skill runs a bundled Python script to perform document conversion. This execution is restricted to the script's internal logic and does not allow for shell command injection or arbitrary execution.\n- [PROMPT_INJECTION]: The skill processes user-supplied Markdown content, creating a potential surface for indirect injection.\n
- Ingestion points: The
scripts/markdown_to_pdf.pyscript reads text from the provided Markdown file.\n - Boundary markers: No specific boundary markers or 'ignore' instructions are added to the input content.\n
- Capability inventory: The script is capable of reading files and writing PDF output using the
reportlablibrary.\n - Sanitization: The input text is passed through
html.escapebefore any formatting tags are applied, preventing the injection of malicious formatting instructions into the PDF rendering engine.
Audit Metadata