markdown-linter-fixer
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill performs standard development tasks using well-known tools.
- [EXTERNAL_DOWNLOADS]: The skill installs the markdownlint-cli2 package from the official npm registry, which is a well-known service.
- [COMMAND_EXECUTION]: Shell commands are used to run linting and formatting operations on local markdown files. These actions are transparent and aligned with the skill's stated purpose.
- [DATA_EXPOSURE]: The skill reads markdown files and configuration files within the project directory. It does not access sensitive system paths or environment variables.
- [SAFE]: Indirect prompt injection surface is present as the skill processes markdown files. Ingestion points: project markdown files (SKILL.md). Boundary markers: absent. Capability inventory: npm, shell execution, file write/edit. Sanitization: absent. The risk is considered low given the specific utility of the tool.
Audit Metadata