Formula—PDF

ReviewAudited by ClawScan on May 15, 2026.

Overview

The skill mostly matches its formula-to-PDF purpose, but an included enhanced converter can forcibly close all Microsoft Edge windows during retries, which could disrupt or lose user work.

Install only if you are comfortable with local PDF generation through Microsoft Edge and a MathJax CDN. Prefer the basic script/manual workflow, and avoid the enhanced script or any kill-edge option unless you have saved work and explicitly want Edge closed. For confidential documents, consider using a local MathJax copy instead of loading it from the CDN.

Publisher note

Render mathematical formulas from HTML to clean PDFs using MathJax and headless Microsoft Edge. Perfect for academic notes, lab reports, and technical documents. No LaTeX compiler needed — just HTML + CDN.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A failed conversion retry could close the user's normal Edge browser windows, potentially losing unsaved form data or interrupting active sessions.

Why it was flagged

The enhanced converter force-terminates every Edge process by image name and calls that cleanup automatically on retry, rather than targeting only a headless process it started.

Skill content
subprocess.run(["taskkill", "/F", "/IM", "msedge.exe"], ...); ... if attempt > 0: kill_edge_processes()
Recommendation

Use the basic converter or manual Edge command by default. Remove automatic Edge process killing, or require explicit user confirmation and only terminate a process started by this skill.

What this means

PDF generation may fail without network access, and confidential document content is rendered in a page that executes third-party JavaScript.

Why it was flagged

The PDF rendering flow loads MathJax JavaScript from a third-party CDN. This is disclosed and purpose-aligned, but it means rendering depends on remote code availability and integrity.

Skill content
<script id="MathJax-script" async src="https://cdn.jsdelivr.net/npm/mathjax@3/es5/tex-chtml.js"></script>
Recommendation

For sensitive or offline work, use a locally bundled or pinned MathJax copy, and clearly disclose the CDN dependency to users.

What this means

The skill may fail or behave unexpectedly on non-Windows systems or systems without Edge/Python/PyMuPDF.

Why it was flagged

The included documentation lists runtime requirements, while the provided registry requirements say no required binaries and no OS restriction. This is a metadata/setup gap, not evidence of malicious behavior.

Skill content
## 依赖

- Windows + Microsoft Edge
- Python 3(脚本用)
- pymupdf(验证用,可选)
Recommendation

Update the skill metadata to declare the Windows/Edge/Python requirements and mark PyMuPDF as optional for verification.