epub-to-markdown
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the system package manager (
apt-get) to install thepandocdependency. - [COMMAND_EXECUTION]: Potential surface for indirect prompt injection or command injection. Ingestion points: reads file content and paths from
<user's_epub_path>in SKILL.md. Boundary markers: double quotes are used in the command but no explicit delimiters are present. Capability inventory: executes shell commands usingpandoc. Sanitization: no validation or sanitization of the input path or EPUB content is performed. - [PROMPT_INJECTION]: Metadata uses the label
category: Officialto claim status, which may be deceptive if the source is unverified.
Audit Metadata