word-to-pdf

• Risk level: Low
• Analyzed: May 1, 2026, 6:06 AM
• Findings: 1
• Version: 1.0.0

Overview

This appears to be a straightforward local DOCX-to-PDF converter; the main thing to watch is installing unpinned Python libraries.

This skill is reasonable for local DOCX-to-PDF conversion. Before installing, use a virtual environment if possible, install dependencies from trusted sources, and choose input/output paths carefully.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Note

What this means

Installing unexpected or compromised dependency versions could affect the user's local Python environment.

Why it was flagged

The skill asks users to install third-party Python packages without pinned versions. These dependencies are central to the converter and no remote install script is shown, but package provenance still matters.

Skill content

pip install reportlab python-docx

Recommendation

Install dependencies from trusted package indexes, consider pinning known-good versions, and use a virtual environment.