← back to baoyu-markdown-to-html

Skill Scanner · baoyu-markdown-to-html

independent scanner by Cisco AI Defense · skill by ECNU-ICALK · how it works ↗

FAILmax severity: CRITICAL

Skill does not specify a license; Node.js filesystem access that could read or write sensitive data; Node.js child_process module usage for shell command execution; +1 more

scanned 2026-08-22

Findings (11)

INFOpolicy_violation

Skill does not specify a license

SKILL.md

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\main.ts:123

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\main.ts:203

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\main.ts:239

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\main.ts:244

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

scripts\md\extensions\plantuml.ts:193

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\md\render.ts:81

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\md\render.ts:677

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\md\render.ts:678

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\md\render.ts:829

HIGHdata_exfiltration

Node.js filesystem access that could read or write sensitive data

scripts\md\render.ts:868

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete