Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Markdown to PDF (Styled)

Convert Markdown files to styled PDFs using pandoc and wkhtmltopdf with built-in or custom CSS style options.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 365 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the included files and script: the md2pdf.sh script and CSS assets implement Markdown→PDF conversion with style options. However, registry metadata lists no required binaries while SKILL.md and the script clearly require pandoc and wkhtmltopdf (and a POSIX shell). This is a metadata omission rather than malicious behavior.
Instruction Scope
SKILL.md instructs the agent to run the included bash script and to ensure pandoc/wkhtmltopdf are installed. The script only reads the provided input markdown, an output path, and a CSS file (either bundled or a user-specified absolute path). It does not exfiltrate data or call external endpoints itself. Note: the script passes --enable-local-file-access to wkhtmltopdf to allow loading local CSS/assets, which is necessary for the stated function but can enable local file reads by the PDF engine.
Install Mechanism
There is no install spec (instruction-only plus a script and assets). That minimizes install-time risk because nothing is downloaded or executed automatically beyond the provided script. The script is plain shell and the CSS files are static.
Credentials
The skill requests no environment variables, credentials, or config paths. This is proportionate to its purpose (local file conversion).
Persistence & Privilege
The skill is not always-enabled and does not request persistent system changes or modify other skills. It runs as an on-demand script using normal user privileges.
Assessment
This skill appears to be what it claims: a simple Markdown→PDF converter using pandoc and wkhtmltopdf. Before installing/using it: 1) ensure pandoc and wkhtmltopdf (and a POSIX shell) are installed—the package metadata does not list these binaries even though the docs and script require them; 2) be aware the script enables wkhtmltopdf's --enable-local-file-access so the PDF renderer can read local resources—avoid converting untrusted Markdown/CSS on sensitive systems or run in a sandbox; 3) if you need network isolation, note wkhtmltopdf can fetch remote resources referenced from your Markdown or CSS (fonts, images); 4) inspect any custom CSS you pass in (or bundled CSS) if you have stricter security requirements. Otherwise the skill contains no hidden network endpoints or credential requests.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
exportvk9748w3rdb8tejhb9cd30072vd820b9blatestvk9748w3rdb8tejhb9cd30072vd820b9bmarkdownvk9748w3rdb8tejhb9cd30072vd820b9bpandocvk9748w3rdb8tejhb9cd30072vd820b9bpdfvk9748w3rdb8tejhb9cd30072vd820b9bwkhtmltopdfvk9748w3rdb8tejhb9cd30072vd820b9b

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

md-to-pdf

version: 1.0.0
author: 大总管
description: Convert Markdown (.md) files to styled PDF documents with pandoc + wkhtmltopdf

Use this skill to convert Markdown to PDF with consistent styles.

Quick Start

  1. Ensure dependencies exist:
pandoc --version
wkhtmltopdf --version
  1. Run conversion:
bash {baseDir}/scripts/md2pdf.sh /abs/path/doc.md

Style Options

Use built-in styles:

  • clean (default): simple business style
  • modern: blue, presentation-friendly
  • paper: serif, reading-friendly

Examples:

bash {baseDir}/scripts/md2pdf.sh /abs/path/doc.md --style clean
bash {baseDir}/scripts/md2pdf.sh /abs/path/doc.md /abs/path/out.pdf --style modern
bash {baseDir}/scripts/md2pdf.sh /abs/path/doc.md --style paper

Custom CSS

Pass an absolute CSS path:

bash {baseDir}/scripts/md2pdf.sh /abs/path/doc.md /abs/path/doc.pdf --style /abs/path/custom.css

Notes

  • Script enables local CSS loading via --enable-local-file-access.
  • If output title warning appears, set Markdown metadata title:.
  • For detailed usage and troubleshooting, read {baseDir}/references/usage.md.

Files

6 total
Select a file
Select a file to preview.

Comments

Loading comments…