markdown-to-pdf
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted markdown data from external files, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: The skill reads and parses content from a user-provided markdown file path in
scripts/markdown_to_pdf.py. - Boundary markers: There are no explicit boundary markers or instructions to ignore embedded commands within the ingested file content.
- Capability inventory: The script performs file read operations and writes the resulting PDF to the filesystem. It does not perform network requests or execute shell commands based on the file content.
- Sanitization: The script includes
_escape_xmlto handle ReportLab markup and_sanitizeto replace unsupported Unicode characters, providing a layer of protection against malformed input affecting the rendering engine. - [COMMAND_EXECUTION]: The skill requires the execution of a local Python script
scripts/markdown_to_pdf.pyto perform the conversion. This is a standard operation for the intended functionality and uses theuvpackage worker for execution environment isolation.
Audit Metadata