Markdown Converter
PassAudited by VirusTotal on May 13, 2026.
Overview
Type: OpenClaw Skill Name: markdown-converter Version: 1.0.0 The skill bundle is benign. It provides instructions for converting various file types to Markdown using the `uvx markitdown` utility. All commands and options described in `SKILL.md` are directly related to this stated purpose, including local file operations and an optional integration with Azure Document Intelligence for enhanced PDF extraction. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the AI agent.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The first run may fetch and cache external package dependencies, and enabling plugins may run additional third-party conversion logic.
The skill directs use of an unpinned external CLI package through uvx and documents optional third-party plugins; this is aligned with the conversion purpose but expands supply-chain trust beyond the reviewed SKILL.md artifact.
Convert files to Markdown using `uvx markitdown` — no installation required. ... First run caches dependencies; subsequent runs are faster. ... --use-plugins # Enable 3rd-party plugins
Use a trusted and preferably pinned version of markitdown, avoid `--use-plugins` unless the plugins are trusted, and review the package source before using it on sensitive documents.
If Azure Document Intelligence is used, document contents may leave the local machine and be handled under the Azure account and endpoint selected by the user.
The optional extraction path uses an external Azure endpoint, so files converted with this mode may be processed by that provider rather than only locally.
-d # Use Azure Document Intelligence -e ENDPOINT # Document Intelligence endpoint ... uvx markitdown scan.pdf -d -e "https://your-resource.cognitiveservices.azure.com/"
Use the Azure option only for documents that are allowed to be sent to that service, and confirm the endpoint, account policy, and data-handling expectations first.