md2word
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The module
scripts/chart_handler.pyutilizessubprocess.runto invoke themmdc(Mermaid CLI) tool for diagram rendering. The implementation follows security best practices by constructing the command as a list of arguments, effectively mitigating shell injection risks. - [EXTERNAL_DOWNLOADS]: The
md2word.pyscript contains adownload_external_imagefunction that usesurllib.requestto retrieve images from external URLs provided in Markdown documents. This network activity is documented and necessary for the core functionality of embedding remote assets into generated documents.
Audit Metadata