ClawHub

Markdown Exporter

v3.6.10

Convert Markdown text to DOCX, PPTX, XLSX, PDF, PNG, HTML, IPYNB, MD, CSV, JSON, JSONL, XML files, and extract code blocks in Markdown to Python, Bash,JS and...

⭐ 3· 1.3k·15 current·15 all-time
byBowen Liang@bowenliang123
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description request the markdown-exporter CLI and the install spec creates a markdown-exporter binary; the declared functionality (converting Markdown to many formats and extracting code blocks) aligns with requiring a conversion CLI. No unrelated credentials, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md instructs only running the markdown-exporter CLI against user-supplied file paths and documents subcommands/options. It does not instruct reading unrelated system files, environment variables, or sending data to external endpoints beyond running the CLI.
ℹ
Install Mechanism
The install spec uses an entry of kind: uv installing package md-exporter which will create the markdown-exporter binary. SKILL.md also documents pip install md-exporter and other install hints. This is a typical package install pattern; the only minor note is that the registry's 'uv' installer is not a universally-known installer—verify that 'uv' resolves to a legitimate package manager and that the md-exporter package comes from a trusted source (PyPI or the linked GitHub repo). No direct arbitrary URL downloads or archive extraction are present in the spec.
✓
Credentials
The skill declares no required environment variables, no credentials, and no config paths. That is proportionate for a local file-conversion CLI.
✓
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent elevated privileges or to modify other skills or system-wide settings. Autonomous invocation is allowed by default but not combined with other concerning factors here.
Assessment
This skill appears to do what it says: it shells out to a markdown-exporter CLI to convert files and does not request secrets or unusual system access. Before installing: (1) verify the md-exporter package on PyPI and the linked GitHub repo (ownership, recent commits, issues); (2) confirm what the 'uv' installer is and prefer installing from a trusted source (pip / PyPI or GitHub releases) if you have concerns; (3) if you want extra safety, run the install and the CLI in an isolated environment (container or VM) and/or inspect the package source code for unexpected network or filesystem operations. If you plan to use this skill with sensitive files, ensure local conversion meets your security/privacy requirements.

Like a lobster shell, security has layers — review code before you run it.

latestvk975mz1hjbmfzj95qfjx9271jx81pdds

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖨 Clawdis
Binsmarkdown-exporter

Install

uv
Bins: markdown-exporter
uv tool install md-exporter

Comments