markdown-editor-integrator
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [Indirect Prompt Injection] (INFO): The components are designed to process external Markdown content, which represents a potential injection surface. 1. Ingestion points: 'value' prop in MarkdownEditor.tsx and 'content' prop in MarkdownPreview.tsx. 2. Boundary markers: No explicit boundary markers are implemented within the components. 3. Capability inventory: UI rendering only; no subprocess execution, file system access, or network operations were detected. 4. Sanitization: Both components implement rehype-sanitize via the rehypePlugins configuration to sanitize rendered output and prevent Cross-Site Scripting (XSS).
Audit Metadata