markdown-to-docx

SUSPICIOUS. The core purpose is benign, but the skill is internally inconsistent and uses a broader-than-necessary install path. Main concerns are supply-chain trust and documentation mismatch, not confirmed malware or credential theft.