markitdown-setup

SUSPICIOUS. The visible skill is purpose-aligned and the upstream package appears legitimate, but the actual installer logic is hidden in an unreviewed local script. That makes install trust only partially verifiable and warrants medium risk rather than benign.