wk-markdown
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Unix utilities (
awk,grep,curl,stat,fmt) to perform its primary tasks: measuring line lengths, extracting URLs for validation, and checking file existence. These operations are scoped to the intended functionality of markdown linting and validation. - [EXTERNAL_DOWNLOADS]: The skill uses
curl -sIto perform HTTP HEAD requests for link validation. This is a standard and expected behavior for a tool claiming to validate links. Theallowed-toolssection correctly restricts this tool to network validation tasks. - [DATA_EXPOSURE]: No sensitive file paths, hardcoded credentials, or exfiltration patterns were found. The skill operates on local markdown files and only sends network requests to the URLs found within those files for validation purposes.
- [PROMPT_INJECTION]: The instructions are purely functional and do not contain patterns designed to override agent safety filters or bypass constraints.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute remote scripts or packages. All logic is contained within the provided markdown instructions and simple shell one-liners.
Audit Metadata