markdown2wechat

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS

Full Analysis

[COMMAND_EXECUTION]: The script scripts/convert.js executes npm install via child_process.execSync. This is used to dynamically install its functional dependencies into a local temporary folder at runtime.
[EXTERNAL_DOWNLOADS]: The skill fetches the marked and juice packages from the public npm registry during the conversion process if they are not already present in the execution environment.

Audit Metadata

Risk Level

SAFE

Analyzed

Apr 8, 2026, 02:17 AM