preview-markdown
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security-conscious design patterns for local file processing and web rendering.
- [EXTERNAL_DOWNLOADS]: Fetches reputable libraries (Marked.js, DOMPurify, and Mermaid) from the well-known jsDelivr CDN. These assets are protected by hardcoded SRI hashes to ensure their integrity and prevent tampering.
- [COMMAND_EXECUTION]: Employs standard system utilities (
open,xdg-open, orstart) to launch the generated HTML file in the browser, which is the core intended functionality. - [DATA_EXFILTRATION]: No data exfiltration vectors were found. The skill operates on local data and applies a strict CSP to the output file to block unauthorized network activity.
- [PROMPT_INJECTION]: No behavioral overrides or malicious instructions designed to bypass safety filters were detected in the skill's logic or documentation.
Audit Metadata