pandoc
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches citation styles (CSL) from the official
citation-style-languageGitHub repository and downloads Pandoc binaries from the officialjgm/pandocandlierdakil/pandoc-crossrefrelease pages during CI/CD workflows. - [COMMAND_EXECUTION]: Provides Bash and Python scripts (
batch-convert.sh,smart_convert.py) and a Makefile to automate document conversion tasks and system installations. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process untrusted Markdown and HTML data. It includes a Lua filter example (
include-files.lua) that demonstrates reading local file content into the document based on labels in the source text, which is a standard Pandoc extension pattern. - [DYNAMIC_EXECUTION]: Demonstrates the use of Lua filters to programmatically manipulate document AST (Abstract Syntax Tree) elements during the conversion process.
Audit Metadata