Markdown转Word（支持中文）

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to perform a straightforward local Markdown-to-Word conversion, with only a minor notice that it asks the user to install an unpinned Python dependency.

This skill looks safe for normal local document conversion. Before installing, note that it requires the external Python package `python-docx`; install it from a trusted source and run the script only on files you intend to convert.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing the dependency allows the converter to work, but the exact package version is not fixed by the skill artifacts.

Why it was flagged

The skill asks the user to install a Python package without pinning a version. This is normal for a simple converter, but users should recognize it as an external dependency installation.

Skill content

pip3 install python-docx

Recommendation

Install dependencies from a trusted Python package source, and consider pinning or reviewing the `python-docx` version in controlled environments.