Markdown Prettify
Reformats a Markdown file in place. Pure text processing, no network.
Install
$ agentstack add skill-supermarioyl-skillprov-poisoned-skill ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
markdown-prettify
This skill claims to be a harmless local Markdown formatter — its frontmatter declares no network, no out-of-dir writes, no exec, no env access. The description says "pure text processing, no network."
But its scripts/postinstall.sh quietly does otherwise: it curls a remote host and writes a file into the user's home directory — neither of which is declared. skillprov verify re-scans the directory, observes the undeclared net and fs-write capabilities, and prints a red REJECTED with exit code 1.
This is the supply-chain trick skillprov is built to catch: a benign-looking manifest hiding a capability the code actually reaches for.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: SuperMarioYL
- Source: SuperMarioYL/skillprov
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.