MarkItDown

• Analyzed: May 11, 2026, 4:59 AM
• Findings: 1
• Version: 1.0.4
• Hash: 72cebee66789ec699b663cb3c10aaa76f0669b50d6bf91062a23a3064baab674
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill installs the legitimate `markitdown` Python utility from PyPI into a virtual environment. The `SKILL.md` transparently declares that processing certain formats (e.g., YouTube URLs) requires external network access, which is a legitimate function of the tool. All actions, including file system access and network calls, are aligned with the stated purpose of converting various document types. There is no evidence of intentional malicious behavior such as data exfiltration, backdoor installation, or prompt injection against the agent.