markdown-linter-fixer
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill performs an installation of
markdownlint-cli2vianpm install -g. While this downloads code from a remote registry, the package is a well-known industry standard for markdown linting. Following the [TRUST-SCOPE-RULE], this is classified as LOW severity. - [COMMAND_EXECUTION] (SAFE): The skill uses Bash to execute
markdownlint-cli2commands. These actions are directly tied to the primary purpose of fixing documentation and are not used for malicious purposes. - [INDIRECT_PROMPT_INJECTION] (LOW): The skill ingests untrusted markdown data from the project.
- Ingestion points: Reads
*.mdfiles viaGlobandReadtools. - Boundary markers: None explicitly defined in the prompts to separate file content from instructions.
- Capability inventory: Includes
Bash,Write, andEditwhich could be misused if linter output was successfully poisoned. - Sanitization: Not present; the skill relies on the linter's structured output but processes content through automated fixes.
Audit Metadata