md2word
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFE
Full Analysis
- COMMAND_EXECUTION (SAFE): The skill uses
subprocess.runinscripts/chart_handler.pyto execute the Mermaid CLI (mmdc). This is implemented using a list-based argument structure which prevents shell injection. The command is used solely for rendering charts from user-provided Markdown content. - EXTERNAL_DOWNLOADS (SAFE): The skill specifies dependencies from trusted registries (PyPI and npm). There are no signs of downloading scripts or binaries from untrusted third-party URLs at runtime.
- DATA_EXFILTRATION (SAFE): No network-capable modules (like
requestsorurllib) are utilized for outgoing data. Analysis of the scripts shows file operations are restricted to reading input Markdown/YAML and writing the output Word document. - OBFUSCATION (SAFE): No encoded strings, homoglyphs, or hidden characters were found. The code is modular, readable, and its behavior matches the stated purpose.
Audit Metadata