Markitdown Converter

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you choose a large or sensitive folder, many documents may be converted and copied into the output folder.

Why it was flagged

Batch conversion recursively reads supported files under a user-provided directory and writes Markdown output files. This is expected for the skill, but it can process many local documents and overwrite matching output files if pointed at a broad or reused output directory.

Skill content
files = list(input_dir.rglob("*")) ... with open(output_path, "w", encoding="utf-8") as f:
Recommendation

Use a dedicated output folder, review the input path before running batch conversion, and avoid converting confidential directories unless you intend to create Markdown copies.

What this means

Installing broad, unpinned dependencies may change your Python environment and relies on the package source available at install time.

Why it was flagged

The installation guidance uses an unpinned external Python dependency with all extras and suggests --break-system-packages. This is purpose-aligned for using MarkItDown, but it expands dependency trust and may affect the local Python environment.

Skill content
python3.12 -m pip install --user --break-system-packages "markitdown[all]"
Recommendation

Prefer the documented virtual environment option, verify the package source, and pin versions if you need reproducible installs.