marktodocx-skill

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 19, 2026, 2:33 AM
• Findings: 0
• Version: 0.1.3

Overview

The skill's code, instructions, and requirements are coherent with its stated purpose (Markdown → DOCX conversion); it reads/writes local files and optionally uses a Mermaid renderer, and it does not request unrelated credentials or unusual system access.

This skill appears to do exactly what it claims: convert local Markdown to DOCX using a bundled Node runtime. It writes files and will read optional environment variables for styling or Mermaid/browser configuration. Before installing: (1) confirm you trust the published author/artifact (it includes vendored packages and optional Mermaid/browser binaries), (2) be aware that Mermaid rendering requires extra runtime components (Chromium or a Mermaid bundle) and will fail loudly if missing, and (3) run the skill in an environment where writing files is acceptable (it writes output files to paths you supply). If you want extra assurance, inspect skill.mjs and the vendor tarballs or run the exported skill in an isolated container. If you do not need Mermaid, the standard export disables it and requires no browser binaries.