Convert LaTeX math formulas in Markdown to styled docx or HTML documents with Unicode symbol support for academic use.

This skill appears to do what it says: converting Markdown with LaTeX formulas into styled docx or HTML. Before installing/using it: 1) install the listed Python packages (pip install python-docx markdown); 2) be aware the tool will read the input markdown and any image file paths referenced in that markdown (it will not fetch remote images), so avoid pointing it at sensitive local files unless you intend to include them; 3) note a small implementation mismatch: the --images option is accepted but not actually used to resolve image links, so ensure image paths in your markdown are correct or adjust the script if you need image-directory handling; 4) there are no network calls or credential requirements in the code, so risk is limited to local file access and standard Python package installation.

Type: OpenClaw Skill Name: academic-formula-converter Version: 1.0.0 The skill bundle's primary function is benign, converting LaTeX formulas. However, the `formula_converter.py` script contains a local file read vulnerability: it attempts to embed images from paths specified in the input Markdown (`doc.add_picture(img_match.group(2))`). While `os.path.exists` is checked, an attacker controlling the Markdown input could potentially specify arbitrary file paths, leading to attempts to read sensitive files. Although a `try...except: pass` block handles errors, the underlying capability to attempt access to arbitrary local files makes the skill suspicious, as it could be exploited for information disclosure.