md2pdf-export
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts for nvm and Node.js from well-known sources, including the official nvm-sh GitHub repository and NodeSource.
- [REMOTE_CODE_EXECUTION]: Downloads and executes shell scripts from well-known infrastructure providers to automate the installation of the Node.js runtime environment.
- [COMMAND_EXECUTION]: Executes system commands to install libraries and fonts required for Chromium to operate in headless mode on various Linux distributions.
- [PRIVILEGE_ESCALATION]: Uses elevated permissions via
sudoto install system-level packages and dependencies necessary for document rendering. - [PERSISTENCE]: Modifies shell profile configuration files (
.bashrcand.zshrc) to persist custom Node.js binary paths across user sessions. - [INDIRECT_PROMPT_INJECTION]: Processes local Markdown files for rendering, representing a standard ingestion surface for user-supplied data.
- Ingestion points: Reads input files via
fs.readFileSyncinscripts/md2pdf.js. - Boundary markers: None specific to LLM safety; uses standard Markdown parsing boundaries.
- Capability inventory: The skill uses Puppeteer for headless Chrome rendering and writes output files to the local file system.
- Sanitization: Standard Markdown parsing using the
markdown-itlibrary.
Audit Metadata