Web to Markdown Pro

PassAudited by ClawScan on May 13, 2026.

Overview

The skill is a straightforward URL-to-Markdown helper, but it relies on an external unpinned CLI package and should only be run with user-approved URLs and output paths.

This appears safe to use for converting web pages to Markdown, provided you trust the external web2md package before installing it. Review the URLs and output paths the agent will use, and avoid batch-processing untrusted lists without checking where files will be saved.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the package would run code that was not part of the provided skill artifacts, so the actual converter implementation is outside this review.

Why it was flagged

The skill relies on installing an external PyPI package, but the registry metadata provides no install spec, version pin, source repository, or included code for that package.

Skill content
## Installation

```bash
pip install web2md
```
Recommendation

Install only from a trusted source, prefer a virtual environment and pinned version, and review the package or publisher before use. The skill publisher should declare the dependency in metadata or provide reviewed installation details.

What this means

If used carelessly, the agent could process the wrong URLs or write Markdown files to unintended locations.

Why it was flagged

The documented workflow uses a local CLI with user-controlled URLs, input lists, and output paths. That is expected for this skill, but it can fetch network resources and create files.

Skill content
web2md <url> -o ~/Documents/reading/<slug>.md
...
web2md urls.txt --batch -d output/
Recommendation

Confirm the URLs, batch input file, and output directory before running conversions, especially for untrusted reading lists or sensitive local folders.