preview-markdown

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows security-conscious design patterns for local file processing and web rendering.
  • [EXTERNAL_DOWNLOADS]: Fetches reputable libraries (Marked.js, DOMPurify, and Mermaid) from the well-known jsDelivr CDN. These assets are protected by hardcoded SRI hashes to ensure their integrity and prevent tampering.
  • [COMMAND_EXECUTION]: Employs standard system utilities (open, xdg-open, or start) to launch the generated HTML file in the browser, which is the core intended functionality.
  • [DATA_EXFILTRATION]: No data exfiltration vectors were found. The skill operates on local data and applies a strict CSP to the output file to block unauthorized network activity.
  • [PROMPT_INJECTION]: No behavioral overrides or malicious instructions designed to bypass safety filters were detected in the skill's logic or documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 09:38 AM