markdown-checker
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script
scripts/check_markdown.pyto automate the detection of markdown syntax and style issues. This command execution is a core feature of the tool's linting capabilities. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes the content of markdown files, which presents a surface for indirect prompt injection if the files contain instructions designed to manipulate the agent.
- Ingestion points: The
load_filefunction inscripts/check_markdown.pyreads the entire content of targeted markdown files; theManual Check FlowinSKILL.mdinstructs the agent to use theReadtool on user-specified files. - Boundary markers: The skill does not define specific delimiters or provide instructions to the agent to disregard potentially malicious instructions embedded within the markdown content.
- Capability inventory: The skill instructions in
SKILL.mdsuggest the agent useReadandEdittools to process and fix identified issues in the files. - Sanitization: No sanitization or filtering is applied to the markdown content before it is read or analyzed by the script or the agent.
Audit Metadata