ClawHub
Back to skill

Security audit

Markdown2Doc

Security checks across malware telemetry and agentic risk

Overview

Markdown2Doc is a cloud-backed Markdown converter that clearly warns it uploads Markdown and referenced local images, so it is acceptable if users treat it as an online conversion service.

Install only if you are comfortable sending the Markdown file and any referenced local images to lab.hjcloud.com. Do not use it for confidential documents, secrets, proprietary notes, private screenshots, or sensitive diagrams, and review image references before converting.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Tp4

High
Category
MCP Tool Poisoning
Confidence
96% confidence
Finding
The skill advertises itself as a lightweight utility with no external dependencies, but its documented workflow and privacy section show that markdown contents and locally referenced images are uploaded to a remote cloud service for processing. This mismatch is dangerous because users may provide sensitive local documents under the assumption of local-only conversion, leading to unintended exfiltration of proprietary or confidential data.

Description-Behavior Mismatch

High
Confidence
98% confidence
Finding
The skill metadata claims a lightweight converter with no external dependencies, but the implementation sends Markdown contents and referenced local images to a remote service at lab.hjcloud.com for processing. This is dangerous because users may reasonably expect local-only handling and could unknowingly exfiltrate sensitive documents or filesystem content embedded as images.

Context-Inappropriate Capability

High
Confidence
94% confidence
Finding
The code performs network requests to list themes and to convert documents, which contradicts the stated dependency-free/local utility positioning. In the skill context, a document converter commonly handles proprietary or sensitive files, so undeclared outbound network capability materially increases risk of data exposure and trust deception.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The conversion flow uploads the full Markdown file plus any local images referenced in the document to a remote service without any explicit user warning at execution time. Because Markdown may include internal documentation, secrets, or sensitive screenshots, silent transmission to a third party can result in significant confidentiality loss.

VirusTotal

1/64 vendors flagged this skill as malicious, and 63/64 flagged it as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.