Markdown Converter
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The first run may fetch and cache external package dependencies, and enabling plugins may run additional third-party conversion logic.
The skill directs use of an unpinned external CLI package through uvx and documents optional third-party plugins; this is aligned with the conversion purpose but expands supply-chain trust beyond the reviewed SKILL.md artifact.
Convert files to Markdown using `uvx markitdown` — no installation required. ... First run caches dependencies; subsequent runs are faster. ... --use-plugins # Enable 3rd-party plugins
Use a trusted and preferably pinned version of markitdown, avoid `--use-plugins` unless the plugins are trusted, and review the package source before using it on sensitive documents.
If Azure Document Intelligence is used, document contents may leave the local machine and be handled under the Azure account and endpoint selected by the user.
The optional extraction path uses an external Azure endpoint, so files converted with this mode may be processed by that provider rather than only locally.
-d # Use Azure Document Intelligence -e ENDPOINT # Document Intelligence endpoint ... uvx markitdown scan.pdf -d -e "https://your-resource.cognitiveservices.azure.com/"
Use the Azure option only for documents that are allowed to be sent to that service, and confirm the endpoint, account policy, and data-handling expectations first.