html-to-markdown
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that fetch software and dependencies from standard registries (npm, PyPI, Cargo) and the vendor's own repositories (GitHub, R-universe). These resources are managed by the author, 'xberg-io'.
- [COMMAND_EXECUTION]: The
html-to-markdownCLI tool supports a--urlflag, which allows the agent to make network requests to fetch and process remote HTML content. - [PROMPT_INJECTION]: The skill serves as a gateway for processing untrusted external data, which introduces a surface for indirect prompt injection attacks.
- Ingestion points: The skill accepts input from local files, stdin, and remote URLs (via the
--urlflag or SDKconvertfunctions), as documented inSKILL.mdandreferences/cli-reference.md. - Boundary markers: The documentation lacks specific instructions for agents to use delimiters or "ignore embedded instructions" warnings when interpreting the converted Markdown output.
- Capability inventory: The library focuses on conversion and metadata extraction; it does not contain built-in functions for executing the resulting Markdown, which limits the risk of immediate exploitation.
- Sanitization: The tool provides a
--preprocessflag with adjustable presets (minimal,standard,aggressive) that can be configured to strip dangerous HTML tags like<script>,<style>, and<form>before conversion takes place.
Audit Metadata