markdownlint-integration
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing official development packages and tools from public registries, including
markdownlint-clivia npm,pre-commitvia pip, and thelinter-markdownlintpackage for Atom. It also references official GitHub repositories for pre-commit hooks. - [COMMAND_EXECUTION]: The documentation includes numerous shell commands for linting files, configuring CI/CD pipelines (GitHub Actions, GitLab CI, CircleCI, Jenkins, Azure Pipelines), and setting up Docker environments. These commands are standard for the markdownlint ecosystem and follow developer best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill documents workflows for processing external markdown files. While this creates a potential attack surface for indirect prompt injection if an agent were to process maliciously crafted markdown files, the skill itself provides standard linting configurations and does not contain any exploitable logic.
- Ingestion points: Markdown files processed by the CLI or API (e.g.,
**/*.md). - Boundary markers: None explicitly defined in the provided configuration examples.
- Capability inventory: File reading/writing via Node.js
fsmodule and shell command execution via Bash. - Sanitization: None, as the primary function is static analysis of file content.
Audit Metadata