NYC

markdown-formatter

Pass

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The skill utilizes a local bash script for validation. Static analysis of 'scripts/validate-markdown.sh' shows it uses standard utilities and does not contain any malicious logic or remote execution triggers.
  • [PROMPT_INJECTION] (LOW): The skill presents an indirect prompt injection surface. Evidence: 1. Ingestion points: Untrusted markdown files are read by the agent. 2. Boundary markers: No delimiters or instructions are provided to the agent to disregard instructions within the data. 3. Capability inventory: The skill has access to Bash and Edit tools. 4. Sanitization: There is no sanitization or filtering of file content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 18, 2026, 03:14 PM