Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Send Md As

v0.3.2

在即时通讯 app 中以优雅图片形式展示 Markdown。支持标题、代码高亮(行号、Monokai)、LaTeX 公式、Mermaid 图表、表格、列表。4 种色彩主题,智能分页。零 CDN 依赖,完全离线渲染。| Render Markdown as a polished image for messagin...

1· 133·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (render Markdown to images/PDF) align with the provided scripts and implementation. However, the SKILL.md claims "Zero CDN dependency, fully offline rendering," while setup.sh installs Playwright and runs 'python3 -m playwright install chromium' and optionally installs npm packages — actions that download runtime artifacts from remote registries/CDNs. This contradicts the offline/CDN-free claim.
Instruction Scope
Runtime instructions are focused on rendering markdown and sending the resulting media. The SKILL.md explicitly requires manual invocation only. The scripts operate on the input markdown and local temporary files and do not attempt to read unrelated system files or environment variables.
!
Install Mechanism
There is no packaged install spec; the included setup.sh performs network installs via pip and npm, runs 'python3 -m playwright install chromium' (which downloads Chromium), and may call system package managers with sudo. It uses npm -g and system package installs (possible global changes). These are normal for this functionality but are moderate-risk actions because they download dependencies from public registries and require elevated privileges and global installs.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The runtime and scripts do not access secrets or unrelated environment variables.
Persistence & Privilege
The skill is not marked always:true and does not attempt to persist within the agent. However, setup.sh performs system-level installs (sudo package manager calls, npm -g) that modify the host environment and require elevated privileges — this is expected for installing runtime dependencies but increases the blast radius and should be acknowledged.
What to consider before installing
What to consider before installing: - The skill itself appears to do what it says (render Markdown to images/PDF) and its runtime scripts operate on local files only. There is no evidence of data exfiltration in the supplied code. - The claim "Zero CDN dependency / fully offline rendering" is misleading in practice: setup.sh will download Playwright and Chromium and may install npm/pip packages from public registries. Expect network downloads at install time. - setup.sh can call system package managers with sudo and runs npm -g and pip installs (global). These will change your system environment. Prefer running setup in a controlled environment (container, VM, or dedicated dev machine) or adapt the script to use a virtualenv/--user pip installs and avoid global npm installs. - Before running setup.sh: inspect it (you already have it), run with --check-only to see missing deps without making changes, and consider hardening (lock package versions, avoid npm -g, or install dependencies manually). Be aware Playwright will download a Chromium binary (~100s MB). - If you require the "zero CDN/offline" guarantee, ask the author for an offline bundle (pre-bundled Chromium and npm artifacts) or a reproducible install method; otherwise assume runtime/install uses network resources. - Minor note: metadata/version strings are slightly inconsistent (SKILL.md header vs _meta.json and render.sh version), which looks like a bookkeeping oversight but not malicious. - If you do not trust the publisher or cannot run in a sandbox, do not run setup.sh with sudo on a production system.

Like a lobster shell, security has layers — review code before you run it.

latestvk978n1j0gewacvzp0fznj2g4rn848g7x

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🖼️ Clawdis
Binspython3

Comments