MD to Mobile Image

• Outcome: Review
• Latest audit: May 29, 2026 at 9:26 PM UTC
• Version:
  2.0.0

Overview

This skill appears to do its advertised Markdown-to-image conversion, but it renders Markdown as active browser HTML without network blocking or clear warnings for untrusted files.

Review before installing if you may convert Markdown from other people, downloads, issue comments, or the internet. Use it only with trusted Markdown unless it is changed to disable raw HTML/scripts and block browser network requests by default; also confirm Playwright installation because it is required but not pinned in package.json.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Context-Inappropriate Capability

Medium

• Confidence: 94% confidence
• Finding: The tool renders attacker-controlled Markdown in a real Chromium instance using page.setContent(..., { waitUntil: 'networkidle' }), which allows embedded HTML such as remote images, iframes, or other fetch-triggering elements to cause outbound network requests. For a local Markdown-to-image converter, this creates unnecessary SSRF/privacy-risk behavior and can leak network metadata or access internal resources reachable from the host running the tool.

VirusTotal

66/66 vendors flagged this skill as clean.