Md Convert
v2.0.3Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Md Convert concepts, best practices, and implementation patterns.
⭐ 0· 124·1 current·1 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe a local reference for 'Md Convert' and the included SKILL.md plus scripts provide only static documentation and CLI-like output. There are no unrelated environment variables, binaries, or external services requested, so the required capabilities match the stated purpose.
Instruction Scope
SKILL.md explicitly states output is plain-text via heredoc with no external API calls or network access. The included scripts/script.sh only prints embedded documentation and help text; it does not read secrets, access external endpoints, or reference unrelated system paths. No instructions give the agent broad discretion to collect additional system context.
Install Mechanism
There is no install spec and no downloads; the skill is instruction-only with an included shell script. Nothing is fetched from external URLs or written to arbitrary locations during install, so installation risk is minimal.
Credentials
The skill declares no required environment variables, credentials, or config paths, and neither SKILL.md nor the script access environment secrets. The absence of requested credentials is proportional to a static reference tool.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills' configurations. It can be invoked by the user or the agent (default), which is appropriate for a reference skill.
Assessment
This skill appears to be a straightforward, local reference tool: it prints static documentation and does not ask for credentials or network access. Things to note before installing or running: (1) the repository script has a minor version string and help-text formatting oddity (not a security issue), (2) the included script can be executed locally — if you plan to run it, review the file (scripts/script.sh) yourself or run it in a sandboxed environment, and (3) because the skill is instruction-only and contains no installers or downloads, it has a low risk profile. If you need higher assurance, inspect the repository or run the script in an isolated container before allowing agent autonomy.Like a lobster shell, security has layers — review code before you run it.
latestvk97behgecdc9mqg3f9rahfq2x583gk3x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
