Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AI-Powered Markdown to Word Converter (LaTeX, Mermaid & Auto Formatting)

Converts uploaded Markdown (.md) files to formatted Word documents via md2word.com, supporting LaTeX and Mermaid rendering.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 2 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description say it uploads Markdown to md2word.com and returns a Word file. The included Python script and SKILL.md both implement exactly that (HTTP session, POST file to md2word.com, GET export). Declared dependencies (requests, beautifulsoup4) are plausible for the task.
Instruction Scope
SKILL.md explicitly instructs uploading the user's .md to https://md2word.com/en and downloading the converted .docx. That is within the stated purpose, but it means user content is sent to a third-party site — a privacy/security consideration that callers must be aware of. The SKILL.md does not instruct reading other files or secrets.
Install Mechanism
There is no install spec (instruction-only delivery) and only small source files plus a requirements.txt are included. No external URLs, binary downloads, or extract steps are used. This is low install risk; however, the runtime will need Python and the listed pip packages available to execute the script.
Credentials
The skill requests no environment variables, credentials, or config paths. The network access it requires (posting files to md2word.com) is proportional to the converter purpose, but it does imply sending potentially sensitive data to an external domain.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills/configs. Autonomous invocation is allowed (platform default) — combine this with the fact it uploads user files when invoked.
Assessment
This skill appears to do what it says: it uploads the provided .md file to md2word.com and returns a .docx. Before installing or using it, consider: - Privacy: your Markdown (which may contain secrets or PII) will be uploaded to a third-party site (md2word.com). Do not use it for sensitive content unless you trust that site and its policy. - Trust and availability: the code hardcodes md2word.com endpoints and a short sleep for processing — conversions may fail if the site changes its API/paths. - Local alternatives: if you need to keep documents local, use local tools (pandoc, python-docx-based converters) instead of uploading to an external service. - Dependencies & runtime: the skill needs Python with requests and BeautifulSoup installed to run the included script. If you are comfortable with those trade-offs, the skill is internally coherent; if not, avoid using it for sensitive documents or prefer a local converter.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.2
Download zip
latestvk972k6tzkc8f65hpj22yw7ajg183yxmt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

md2word Skill

Description

A skill that converts .md files to Word files. When users send .md files, it automatically accesses the https://md2word.com/en website, uploads the file, and downloads the converted Word file.

Input Format

  • Accepts .md files sent by users

Output Format

  • Returns the converted Word file to users

Workflow

  1. Receive .md file from user
  2. Access https://md2word.com/en website
  3. Upload .md file to the website
  4. Wait for conversion to complete
  5. Download the converted Word file
  6. Return the Word file to the user

Dependencies

  • requests
  • beautifulsoup4

功能描述

将.md文件转换为Word文件的技能。当用户发送.md文件时,自动访问 https://md2word.com/en 网站,上传文件并下载转换后的Word文件。

输入格式

  • 接收用户发送的.md文件

输出格式

  • 向用户返回转换后的Word文件

工作流程

  1. 接收用户发送的.md文件
  2. 访问 https://md2word.com/en 网站
  3. 上传.md文件到网站
  4. 等待转换完成
  5. 下载转换后的Word文件
  6. 将Word文件返回给用户

依赖

  • requests
  • beautifulsoup4

Files

5 total
Select a file
Select a file to preview.

Comments

Loading comments…