@6171/doc-to-markdown
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an Indirect Prompt Injection surface. It is designed to ingest untrusted data from external document formats (PDF, DOCX, PPTX, XLSX, HTML) and convert them into Markdown for consumption by an AI agent. This allows for the injection of malicious instructions that could influence the agent's downstream tasks.
- Ingestion points: The
convert.pyscript accepts arbitrary file paths via theinputargument (line 217). - Boundary markers: Absent. The conversion process outputs raw Markdown without wrapping the content in delimiters or adding warnings to ignore instructions within the document content.
- Capability inventory: The
convert.pyscript has the capability to read local files and write results to the file system if the--outputflag is used. - Sanitization: The HTML converter (
convert_html) performs basic tag stripping of script and style tags (line 152), but no semantic filtering or safety sanitization is performed on the text content across any of the supported formats.
Audit Metadata