Markdown to Word
v1.0.1Markdown转Word文档技能。将Markdown文档转换为符合中文排版标准的专业格式Word文档，支持多种预设格式。适用于正式文档、论文、报告等需要规范排版的文档转换。
⭐ 0· 148·1 current·1 all-time
byxierluo@cat-xierluo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Markdown→Word, Chinese typography presets) match the delivered files: a CLI entrypoint (scripts/md2word.py), configuration/presets, template extraction, image/table/chart handlers and documentation. Declared Python and optional mermaid-cli dependencies are appropriate for the stated functionality.
Instruction Scope
SKILL.md instructs running the provided Python scripts and optionally mermaid-cli. The codebase includes image downloading support (per CHANGELOG) and chart rendering that invokes a local mmdc subprocess if available. Those behaviors are expected for embedding external images and rendering Mermaid charts, but they imply network requests for external image URLs and execution of an external binary (mmdc). No instructions ask the agent to read unrelated system credentials or exfiltrate data.
Install Mechanism
No install spec is present (instruction-only skill) and dependencies are typical (pip packages and optional npm mermaid-cli). No archive downloads from arbitrary URLs or unusual install locations are present in the metadata.
Credentials
The skill requests no credentials or config paths. The only environment influence observed is an optional MMDCCMD environment variable used to override the mmdc binary path for Mermaid rendering — appropriate and limited in scope.
Persistence & Privilege
always is false and the skill does not request permanent/system-wide changes. The scripts create temporary files in the skill directory when rendering charts and write output .docx files as expected; there is no evidence of modifying other skills or agent-wide configuration.
Assessment
This skill appears to do what it says: convert Markdown to Word with configurable presets. Points to consider before installing/using: 1) If your Markdown contains external image URLs, the tool will fetch those (standard behavior) — that causes outbound HTTP requests and may reveal your IP to remote hosts; avoid converting untrusted documents or run in a network-restricted environment if that matters. 2) Mermaid chart rendering invokes an external mmdc binary (npm @mermaid-js/mermaid-cli) via subprocess; running untrusted binaries or rendering untrusted Mermaid input can run arbitrary code in the binary's environment — the script falls back to text if local mmdc is not found. 3) The code writes temporary files into the skill directory; run the tool in an isolated or disposable workspace if you process sensitive data. 4) If you want extra assurance, review scripts/md2word.py and any omitted files for the image download function and confirm there are no unexpected network endpoints or hidden telemetry. Otherwise the skill's requirements and behavior are proportionate to its purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97e5qdgkvhv6p78n115n4wcns84mxpn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.