skills/v1-io/v1tamins/v1-md2docs/Gen Agent Trust Hub

v1-md2docs

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.check_call to install required Python dependencies (markdown, google-auth, etc.) and subprocess.run to render Mermaid diagrams via mmdc or npx if available.
  • [EXTERNAL_DOWNLOADS]: Upon first run, the skill fetches standard Python packages from the official PyPI registry and may download the @mermaid-js/mermaid-cli package via npx to handle diagram rendering.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided Markdown files as input for conversion.
  • Ingestion points: The scripts/md2docs.py script reads the content of the Markdown file specified in the command arguments.
  • Boundary markers: No specific boundary markers or 'ignore' instructions are used; the file is processed as standard Markdown.
  • Capability inventory: The skill possesses the capability to execute shell commands (pip, npx), write to the file system (temporary files, OAuth tokens), and perform network operations (Google Drive API).
  • Sanitization: Input content is parsed using the standard markdown library and transformed via regular expressions into styled HTML for Google Drive upload.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 06:52 PM