md-to-office

Fail

Audited by Socket on Feb 23, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

[Skill Scanner] Natural language instruction to download and install from URL detected This skill is functionally consistent with its stated purpose (Markdown -> Office/PDF conversions using pandoc). I found no indicators of malicious behavior. The primary security considerations are operational: it runs subprocesses (pandoc), writes and deletes local files (including a predictable temp filename), and relies on system-installed tooling. Those are expected for this functionality but warrant standard caution (validate/sanitize filenames, use secure temp files, run in trusted environment).

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 23, 2026, 04:29 PM
Package URL
pkg:socket/skills-sh/openclaw%2Fskills%2Fmd-to-office%2F@85967aec908e602924e0a0a76a1d185950f55119