markdown-to-word
v0.3.0Convert a Markdown file or raw Markdown string into a polished Word DOCX document. Supports custom Word template files, includes built-in DOCX templates, and...
⭐ 1· 27·0 current·0 all-time
byKing@mutour
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Markdown → DOCX conversion with templates) lines up with included scripts and assets. The scripts implement conversion via pandoc and include template generation. Minor incoherence: registry metadata lists no required binaries, but both SKILL.md and the scripts explicitly require pandoc on PATH.
Instruction Scope
SKILL.md limits the agent to converting Markdown inputs (file or raw string), choosing templates, and optional metadata/resource paths. The scripts only read user-supplied files (input Markdown, metadata YAML, template DOCX) and create output DOCX; they do create temporary files for raw-markdown conversion. No instructions reference unrelated system files, credentials, or external endpoints.
Install Mechanism
This is an instruction-only skill with no install spec. Two local Python scripts and template assets are bundled; no external downloads or archive extraction are performed by an installer. Risk is low for install mechanism.
Credentials
The skill requests no environment variables or credentials. It does require a local pandoc binary (enforced at runtime) and read/write access to file paths the user supplies; these are proportional for converting files to .docx.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence or modify other skills. It runs as-needed and only interacts with files and subprocesses relevant to the conversion task.
Assessment
This skill appears to do what it says: it runs pandoc (so make sure pandoc is installed and up-to-date) to convert Markdown to .docx using either built-in or user-provided templates. Before using it: 1) Install pandoc on the host (SKILL.md and scripts expect it even though registry metadata doesn't list it). 2) Be cautious when passing untrusted template files or metadata files — the script will read any file path you provide. 3) If you plan to let the agent run this autonomously, restrict inputs it may supply (to avoid reading sensitive files via --resource-path or --template). 4) If desired, run the scripts locally (with test inputs) to verify output and behavior before granting the skill broader access.Like a lobster shell, security has layers — review code before you run it.
latestvk972msemhstk65wxhpj9tn0vjd84b6nk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.