Web to Markdown Pro

PassAudited by VirusTotal on May 13, 2026.

Overview

Type: OpenClaw Skill Name: web2md-pro Version: 1.0.0 The skill bundle consists of metadata and documentation (SKILL.md) for a utility that converts web pages to Markdown. It describes standard CLI usage, installation via pip, and legitimate dependencies like readability-lxml. There is no evidence of malicious code, prompt injection, or unauthorized data access.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the package would run code that was not part of the provided skill artifacts, so the actual converter implementation is outside this review.

Why it was flagged

The skill relies on installing an external PyPI package, but the registry metadata provides no install spec, version pin, source repository, or included code for that package.

Skill content
## Installation

```bash
pip install web2md
```
Recommendation

Install only from a trusted source, prefer a virtual environment and pinned version, and review the package or publisher before use. The skill publisher should declare the dependency in metadata or provide reviewed installation details.

What this means

If used carelessly, the agent could process the wrong URLs or write Markdown files to unintended locations.

Why it was flagged

The documented workflow uses a local CLI with user-controlled URLs, input lists, and output paths. That is expected for this skill, but it can fetch network resources and create files.

Skill content
web2md <url> -o ~/Documents/reading/<slug>.md
...
web2md urls.txt --batch -d output/
Recommendation

Confirm the URLs, batch input file, and output directory before running conversions, especially for untrusted reading lists or sensitive local folders.