markdown-to-image
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The setup.py script installs the playwright package via pip and the Chromium browser engine from official Microsoft-managed sources. These are trusted dependencies required for the skill's rendering functionality.- [COMMAND_EXECUTION]: The setup.py script utilizes subprocess calls to execute installation commands for its environment. This is a standard procedure for tools requiring specific system-level dependencies like browser engines.- [PROMPT_INJECTION]: The skill processes user-supplied Markdown content as data for rendering. While it provides basic HTML escaping to protect the internal browser context, it is designed to render content provided in the Markdown file as its primary function.- [SAFE]: The skill follows standard development practices for a browser-based rendering tool, such as using temporary files for rendering and cleaning them up after completion. No unauthorized file access or network exfiltration was found.
Audit Metadata