mermint-markdown-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses
npxto download and execute themermintCLI directly from the author's GitHub repository (git+https://github.com/alessandrobologna/mermint.git). This is a vendor-owned resource used for the skill's primary function. - [COMMAND_EXECUTION]: The workflow involves executing local system commands including
node,npx,ls, andrg(orgrep) to perform environment checks, run the rendering tool, and verify output files. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the
mermintpackage from GitHub and potentially install Playwright browsers (npx playwright install) from official registries if they are missing from the environment.
Audit Metadata