md2pdf-xelatex
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to do what it says—convert Markdown to PDF locally—but users should notice that it relies on external Pandoc/LaTeX tools that are not declared in the registry metadata.
This skill looks safe for its stated purpose. Before installing or using it, make sure you are comfortable installing Pandoc/TeX dependencies from trusted sources and confirm the input and output file paths you give it.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may need to manually install large system packages and cannot verify an upstream homepage from the registry metadata alone.
The registry metadata does not provide provenance or machine-readable dependency requirements, even though the skill documentation and script rely on external Pandoc/TeX tools.
Source: unknown; Homepage: none ... Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Install Pandoc and TeX packages only from trusted OS repositories, and review the included script if provenance matters to you.
The skill will run local PDF-generation commands and create or replace the specified PDF output file.
The script executes the local Pandoc/XeLaTeX toolchain and writes the requested output PDF. This is central to the stated conversion purpose and is not hidden.
PANDOC_ARGS=( ... -o "$OUTPUT" --pdf-engine=xelatex ... ) ... pandoc "${PANDOC_ARGS[@]}"Use it only on Markdown files you intend to convert, choose the output path carefully, and keep the local PDF toolchain installed from trusted sources.