Bookify - Convert Markdown to PDF or EPUB
v1.0.1Convert Markdown files to styled PDF or EPUB ebook using md-bookify. Use when the user wants to generate a PDF document or EPUB ebook from markdown content o...
⭐ 0· 69·0 current·0 all-time
byDan@danielefavi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say 'convert Markdown to PDF or EPUB using md-bookify' and the instructions explicitly invoke npx md-bookify@2.2.1 and (when needed) npx puppeteer to install Chromium. Required tools/paths/credentials are consistent with that purpose.
Instruction Scope
SKILL.md only tells the agent to locate/read Markdown files (via Glob/Read) and run md-bookify (and optionally puppeteer to install Chromium). These actions are proportionate to converting markdown files; there are no instructions to access unrelated system files, credentials, or external endpoints beyond npm-driven package fetches and the normal package runtime behavior.
Install Mechanism
This is an instruction-only skill with no install spec, but it relies on npx to fetch and execute md-bookify@2.2.1 and puppeteer@24 at runtime from the npm registry. Fetching and executing packages on-demand is coherent for this task but carries typical supply-chain risk (remote code execution from npm). The SKILL.md pins versions, which reduces some risk, but users should still verify the package and version.
Credentials
No environment variables or secrets are requested. The only environmental requirements are Node >= 20, ability to run npx, and (optionally) downloading Chromium via puppeteer. Those are appropriate for running an npm-based converter and for rendering PDFs.
Persistence & Privilege
The skill is not always-enabled, doesn't request persistent system-wide changes, and doesn't ask to modify other skills' configs. It will run packages at execution time but does not claim elevated or persistent privileges.
Assessment
This skill is coherent for converting Markdown to PDF/EPUB, but it runs npm packages via npx at runtime. Before using it, verify the md-bookify@2.2.1 package reputation and source (check the npm package page and recent release notes), ensure the execution environment has Node >= 20 and is trusted, and consider running conversions in a sandboxed or limited-permission environment. If you prefer not to fetch code at runtime, preinstall the package versions you trust on the host and ensure Chromium is available to avoid on-demand downloads.Like a lobster shell, security has layers — review code before you run it.
latestvk97bx6t7f4e861tkbf1dm54eqn84ntgz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.