Back to skill
v1.0.0

md-to-office

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 4:58 AM.

Analysis

This is an instruction-only Pandoc guide with no included code or credentials, but it relies on a local Pandoc install and includes broader conversion examples than Markdown-to-PDF.

GuidanceBefore using this skill, install Pandoc and any PDF engine from a trusted source, verify the source and destination file paths, and keep use scoped to Markdown-to-PDF unless you intentionally want one of the broader Pandoc examples.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation
SeverityLowConfidenceHighStatusNote
SKILL.md
pandoc [options] [input-file]…; Pandoc can directly fetch and convert content from a URL.

The skill exposes Pandoc's broad command-line surface, including URL input, which is wider than the stated Markdown-to-PDF purpose. It is documented as examples rather than hidden or automatic behavior.

User impactIf used too broadly, the agent could attempt conversions or source content beyond the specific local Markdown-to-PDF task the user intended.
RecommendationUse the skill only for explicit user-requested conversions, confirm input and output paths, and allow URL-based or non-PDF conversions only when specifically desired.
Agentic Supply Chain Vulnerabilities
SeverityInfoConfidenceHighStatusNote
metadata
Required binaries (all must exist): none; No install spec — this is an instruction-only skill.

The runtime instructions rely on Pandoc and possibly a LaTeX engine, but the metadata does not declare or install those dependencies. This is a setup/provenance note, not evidence of hidden code.

User impactThe skill will only be as trustworthy as the local Pandoc/PDF tools the user provides.
RecommendationInstall Pandoc and any PDF engine from trusted official package sources before using the skill.