← Back to Skills Marketplace
424
Downloads
0
Stars
2
Active Installs
3
Versions
Install in OpenClaw
/install markdown-table-to-image
Description
将 Markdown 表格转换为清晰图片。当用户说"表格看不清"、"生成图片"、"转成图片"时触发。
Usage Guidance
这是一个实现清晰、与说明一致的技能，但在安装或启用前请考虑：
- 确认本机已安装并信任 wkhtmltoimage（从官方或可信包管理器安装），因为该二进制会被执行。
- 脚本通过 execSync 拼接命令字符串执行 wkhtmltoimage：确保代理/调用方不会把未消毒的输出文件路径或宽度参数传入（避免命令注入）。最好只用受控路径（例如 /tmp/table.png）或对参数进行严格检查/转义。
- 脚本会在系统临时目录写入 HTML 并删除，确认运行环境对临时目录和目标输出路径有合适的读写权限。
- 如果你担心安全性，可审阅或替换脚本中对 exec 的调用（改为 execFile 或传参数组），或在受限沙箱中先测试。
总体而言，该技能内部一致且用途明确，但请按上述建议确保调用参数来自受信任源并验证 wkhtmltoimage 二进制来源。
Capability Analysis
Type: OpenClaw Skill
Name: markdown-table-to-image
Version: 1.0.2
The script `scripts/md2img.js` contains a shell injection vulnerability where command-line arguments (`width` and `outputFile`) are concatenated directly into an `execSync` call to `wkhtmltoimage`. While the tool's stated purpose of converting Markdown tables to images is legitimate, the lack of input sanitization allows for potential arbitrary command execution if the agent is prompted with malicious parameters. No evidence of intentional malware or data exfiltration was found.
Capability Assessment
Purpose & Capability
技能名称、说明与所需资源一致：将 Markdown 表格转为图片需要 node 和 wkhtmltoimage，提供的脚本实现正是该功能，没有要求与功能无关的凭据或系统访问。
Instruction Scope
SKILL.md 指示代理提取表格并运行脚本生成图片，范围限定于表格内容和生成的图片。脚本写入临时 HTML 到系统临时目录并删除它，未访问用户其它文件或环境变量。不过脚本使用 execSync 将命令作为单一字符串传给 shell（包含 width、临时文件路径和输出文件名），如果输出文件名或宽度来自不受信任的输入则存在命令注入风险；表格文本本身未直接插入 shell 命令。
Install Mechanism
无安装规范（instruction-only + 附带脚本），不会从外部 URL 下载或写入任意可执行文件。仅要求系统已安装 node 与 wkhtmltoimage。
Credentials
不需要任何环境变量或凭据，所需权限与功能相称。
Persistence & Privilege
不要求 always:true 或长期驻留；默认可由代理调用但不会修改其他技能或全局配置。
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install markdown-table-to-image - After installation, invoke the skill by name or use
/markdown-table-to-image - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
v1.0.2: 版本号修正
v1.0.1
**Summary: Switched from Python/Pillow to Node.js/wkhtmltoimage for table-to-image conversion.**
- Replaced the Python script (table2img.py) with a new Node.js script (md2img.js) for generating images from Markdown tables.
- Now uses wkhtmltoimage for rendering images, enabling HTML-based styling and improved output.
- Updated SKILL.md documentation to reflect new usage, dependencies (node, wkhtmltoimage), and command examples.
- Output remains in high-quality PNG format; table content is center-aligned and supports both Chinese and English.
- Deprecated all Python and Pillow-based instructions.
v1.0.0
首次发布：将 Markdown 表格转换为清晰图片，适合手机小屏幕查看，支持中英文，多种样式
Metadata
Frequently Asked Questions
What is Table To Image?
将 Markdown 表格转换为清晰图片。当用户说"表格看不清"、"生成图片"、"转成图片"时触发。 It is an AI Agent Skill for Claude Code / OpenClaw, with 424 downloads so far.
How do I install Table To Image?
Run "/install markdown-table-to-image" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Table To Image free?
Yes, Table To Image is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Table To Image support?
Table To Image is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Table To Image?
It is built and maintained by Rao Lin (@bg1avd); the current version is v1.0.2.
More Skills