markdown-to-image
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
inkframeCLI throughnpx, involving subprocess execution in the agent's environment. The documentation also suggests the use of shell job control (background processes via&andwait) for parallel rendering tasks. - [EXTERNAL_DOWNLOADS]: Running
npx inkframetriggers a download of the package from the public NPM registry if it is not already present in the environment. - [DATA_EXFILTRATION]: The CLI tool supports an
@prefix convention (e.g.,--content @file.md) that allows it to read local files from the agent's filesystem and transmit their contents to theinkframe.devAPI for rendering. This capability creates a surface for potential data exposure if the agent is directed to read sensitive files.
Audit Metadata