ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Pdf To Markdown

v3.0.1

Convert PDF files to Markdown with table recognition. Use when extracting text, converting tables, summarizing documents, fixing formatting issues.

⭐ 0· 663·6 current·6 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (PDF → Markdown with table recognition) align with the shipped scripts: they extract PDF text (pdftotext or Python fallbacks), convert/format text, and write Markdown. Required resources are local files and optional Python libs; nothing requests unrelated cloud credentials or unrelated platform access.
ℹ
Instruction Scope
SKILL.md directs the agent to run scripts/script.sh commands which map to the implemented operations. Minor inconsistency: the SKILL.md command list omits file/argument examples for most commands (script functions expect PDF file args or PDF_INPUT env var), and the repo contains an extra scripts/pdf.sh with its own CLI that also expects PDF_INPUT in some Python fragments — this creates ambiguity about how input should be provided but does not indicate malicious behavior.
✓
Install Mechanism
No install spec — instruction-only with local shell scripts. The code may rely on system tools (pdftotext, pdfinfo) or Python packages (PyPDF2, pdfminer.six) but does not download arbitrary code or contact external URLs.
ℹ
Credentials
No credentials or external environment variables are required; a single optional PDF_TO_MARKDOWN_DIR controls storage. The tool creates ~/.pdf-to-markdown, writes output, a config file, and a history log — users should note logs/config may contain file names or metadata from processed documents.
✓
Persistence & Privilege
The skill is not configured always:true and does not modify other skills. It persists only its own config/history under the user's home directory, which is normal for a CLI utility.
Assessment
This skill appears to be what it says: a local PDF→Markdown converter. Before installing or invoking it, review and accept that it will create ~/.pdf-to-markdown/, write output files and a history.log, and may log filenames/operations. It may require system tools (pdftotext/pdfinfo) or Python packages (PyPDF2, pdfminer.six) to be installed — the scripts print helpful error messages if missing. Note the SKILL.md examples are terse: you typically need to pass a PDF filename to commands (or set PDF_INPUT for some helpers). If you process sensitive documents, run the tool in a controlled environment, inspect the scripts yourself, and/or ensure the output/history location is secure or changed via PDF_TO_MARKDOWN_DIR.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f84h9hqbg1j2wwdsnzj2k7h836bg9productivityvk977hqmt22de0pck185hsmsxx582sx0w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments