md2pdf (Pandoc + Typst)
v1.0.0Convert Markdown files to beautifully formatted PDFs using Pandoc and Typst. Supports headings, tables, code blocks, links, emojis, and GitHub-style formatti...
⭐ 0· 127·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the provided script and README. The SKILL.md correctly documents that Pandoc and Typst are required, and the script uses both; however, the registry metadata lists no required binaries—this is a mild inconsistency (the skill will fail if pandoc/typst are not installed but the registry advertises none).
Instruction Scope
The runtime instructions and the included bash script stay within scope: they take a user-supplied Markdown file, convert it to an intermediate Typst file, wrap it with a styling template, compile to PDF, and clean up temporary files. The script only reads the supplied path and writes temp files alongside the source; it performs no network calls, no reads of unrelated files or env vars, and no unexpected outbound communication. Note: typst is invoked with --root set to the input directory, so relative includes/resources in that directory may be used during compilation (this is expected for document rendering).
Install Mechanism
No install spec (instruction-only plus an included script). This is the lower-risk model: nothing is downloaded or installed automatically by the skill itself.
Credentials
The skill requests no environment variables, credentials, or config paths. The script runs using local binaries (pandoc, typst) and operates on the file provided by the user—no secret access is requested or required.
Persistence & Privilege
The skill does not request permanent/always-on presence (always:false) and does not modify other skills or system-wide settings. Autonomous invocation is allowed by default but is not combined with broad access or suspicious behavior.
Assessment
This skill appears to do what it claims: convert a provided Markdown file into a PDF using Pandoc and Typst. Before installing or running it: (1) ensure Pandoc and Typst are installed from official sources (brew or official releases) because the registry metadata does not declare them; (2) run the script on a copy of sensitive documents or in a safe folder until you confirm it behaves as expected—the script creates temporary dot-prefixed .typ files in the same folder and deletes them; (3) be aware that Typst's --root is set to the input directory, so any relative includes or images in that directory may be read during compile (this is normal for rendering but worth noting for sensitive directories). If you need the registry to enforce prerequisites, ask the publisher to declare pandoc/typst as required binaries in the skill metadata.Like a lobster shell, security has layers — review code before you run it.
latestvk9735p962n1bg08b1rpx9b1wh983wgyp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.