MarkItDown
v1.0.4MarkItDown is a Python utility from Microsoft for converting various files (PDF, Word, Excel, PPTX, Images, Audio) to Markdown. Useful for extracting structu...
⭐ 0· 875·36 current·39 all-time
byDamir Armanov@damirikys
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (document-to-Markdown conversion) matches the instructions and required binary (python3). Requiring a local virtualenv and markitdown[all] from PyPI is proportionate to the utility's functionality.
Instruction Scope
Instructions are narrowly scoped to creating a .venv, installing the markitdown package, and running the markitdown CLI on local files. The doc correctly warns that processing YouTube URLs or fetching remote media will require network access; this is expected but worth noting because it enables downloading external content.
Install Mechanism
Install is an instruction-only step that runs python3 -m venv and pip install markitdown[all] from PyPI. Installing from PyPI into a local virtualenv is standard, but it will download third-party packages and write files into the skill folder (.venv). This is moderate risk only in that it fetches external packages — no unusual URLs or archive extraction are used.
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond writing a local virtualenv. That is proportionate for a local conversion tool.
Persistence & Privilege
always is false and the skill does not request elevated or permanent platform privileges. It creates a local .venv and binaries under the skill directory, which is normal for an instruction-only install.
Assessment
This skill appears to do what it says: it creates a .venv in the skill folder and pip-installs markitdown[all] from PyPI, then runs the markitdown CLI on files. Before installing, consider: 1) you will need network access for the pip install and for processing some remote media (e.g., YouTube URLs); 2) the virtualenv and packages will be written into the skill folder (.venv); 3) processing some formats (audio/video) may require system tools like ffmpeg you must install separately; 4) only run this in an environment where you trust the PyPI package and are comfortable giving the tool access to the directories containing files you want to convert. If you want extra caution, review the markitdown PyPI package and its GitHub repo or run the install in an isolated container or VM.Like a lobster shell, security has layers — review code before you run it.
latestvk97bk3y28ttzvza2ertwsj3pmd821w80
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3