Converts document files (.pdf, .docx, .xlsx, .pptx) to Markdown using the `markitdown` command.

This skill will run a local program named 'markitdown' on files you ask it to convert. Before installing or using it: (1) Confirm where 'markitdown' comes from (official project page or package repository) and only use a trusted binary. (2) If you don't already have markitdown installed, ask the skill author for an install spec or avoid using the skill. (3) Don't run this on sensitive documents until you've verified the CLI's behavior (e.g., test on non-sensitive files and inspect network/activity). (4) If possible, request the skill declare required binaries or provide a safe install/source — that would change this assessment to benign.

Type: OpenClaw Skill Name: doc-converter Version: 1.0.0 The skill executes a shell command `markitdown "{file_path}"` within `SKILL.md` to convert documents to Markdown. While the stated purpose is legitimate, the direct inclusion of a variable in a shell string without explicit sanitization or escaping mechanisms poses a potential shell injection vulnerability if a user provides a maliciously crafted filename. No evidence of intentional malice or data exfiltration was found.