Md2pdf WeasyPrint
v2.0.0Markdown 转 PDF 技能。将 Markdown 文件转换为精美的 PDF 文档,完美支持中文、代码高亮、自定义样式。
⭐ 2· 750·5 current·6 all-time
byxiaofei@franklu0819-lang
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description align with the shipped artifacts: python3-based scripts (Python + WeasyPrint/markdown) and shell wrapper. The requested runtime (python3 and the Python packages markdown/weasyprint) is appropriate. Minor mismatch: the skill claims cross-platform but the scripts use yum and fc-list (RHEL/CentOS assumptions) and reference example absolute paths (/root/.openclaw/...), so it may require adaptation on non-RHEL systems or non-root environments.
Instruction Scope
SKILL.md and the shell script instruct the agent to run local scripts that read the provided Markdown, generate HTML, and write a PDF — all within scope. They also instruct automatic installation of Python packages and system fonts (via pip and yum). The instructions do not attempt to read unrelated files, environment variables, or transmit data to external endpoints, but they do modify the host (install packages/fonts) and assume network access to package repositories.
Install Mechanism
No platform install spec is declared (instruction-only), but runtime behavior includes pip install (PyPI) and yum install (OS packages). Installing from PyPI and system repos is expected for this functionality but carries the usual network-and-dependency risk; the use of yum only (no apt/homebrew/fallback) is a portability concern. No obscure URLs or archive extraction observed.
Credentials
The skill requests no environment variables or credentials. Its actions (reading input.md and writing output.pdf) are proportional to its purpose.
Persistence & Privilege
The skill is not always-enabled and does not ask for persistent presence. However, it performs system package installations (yum, pip) which typically require elevated privileges; that is a privilege implication the user should be aware of before running the scripts on a shared or production host.
Assessment
This skill is internally coherent and appears to implement the stated Markdown→PDF functionality. Before running it: 1) Inspect the included scripts (already provided) and confirm you are comfortable with pip install and yum install commands being run on the host. 2) Run it in an isolated environment (container, VM) if you don't want system packages changed. 3) Note the scripts use yum and fc-list (RHEL/CentOS style); adapt to apt/brew on other systems. 4) If you have limited privileges, pre-install the Python packages and fonts yourself and then run the scripts to avoid granting root access. 5) If you need to be extra cautious, replace pip install -q with reviewable install steps or run pip in a virtualenv.Like a lobster shell, security has layers — review code before you run it.
latestvk979vj8v8c4fp4rc6vyq4dn5jh81jjsb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3
