markdown-to-docx
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- EXTERNAL_DOWNLOADS (LOW): The script uses npx to download and execute the markdown-docx package from the npm registry at runtime.
- COMMAND_EXECUTION (SAFE): The implementation uses subprocess.run with argument lists rather than shell strings, effectively mitigating command injection risks.
- DATA_EXPOSURE (SAFE): Analysis of the Python script shows no evidence of sensitive data access or unauthorized exfiltration.
Audit Metadata