md-to-office

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only Pandoc guide with no included code or credentials, but it relies on a local Pandoc install and includes broader conversion examples than Markdown-to-PDF.

Before using this skill, install Pandoc and any PDF engine from a trusted source, verify the source and destination file paths, and keep use scoped to Markdown-to-PDF unless you intentionally want one of the broader Pandoc examples.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used too broadly, the agent could attempt conversions or source content beyond the specific local Markdown-to-PDF task the user intended.

Why it was flagged

The skill exposes Pandoc's broad command-line surface, including URL input, which is wider than the stated Markdown-to-PDF purpose. It is documented as examples rather than hidden or automatic behavior.

Skill content
pandoc [options] [input-file]…; Pandoc can directly fetch and convert content from a URL.
Recommendation

Use the skill only for explicit user-requested conversions, confirm input and output paths, and allow URL-based or non-PDF conversions only when specifically desired.

What this means

The skill will only be as trustworthy as the local Pandoc/PDF tools the user provides.

Why it was flagged

The runtime instructions rely on Pandoc and possibly a LaTeX engine, but the metadata does not declare or install those dependencies. This is a setup/provenance note, not evidence of hidden code.

Skill content
Required binaries (all must exist): none; No install spec — this is an instruction-only skill.
Recommendation

Install Pandoc and any PDF engine from trusted official package sources before using the skill.