Markdown to Page

Convert Markdown files into styled, scrollable wide-screen HTML pages with dark/light themes, animations, and rich directive components for web articles.

This skill appears to do what it says: it runs a bundled Python script to convert a Markdown file to HTML. Before installing or running it, consider: (1) The script will read any local files referenced by image links in the Markdown (including absolute paths) and embed their bytes into the output when --embed-images is used — do not run it on untrusted Markdown that points to sensitive local files. (2) The generated HTML may include raw HTML from the input and can therefore execute scripts when opened in a browser; avoid opening/sharing output created from untrusted sources. (3) Pillow is optional; if missing the script will fall back to base64-encoding raw bytes. If you want extra safety, review the included scripts/md_to_page.py source locally and run it on trusted files only.

Type: OpenClaw Skill Name: md-to-page Version: 1.0.0 The skill bundle provides a Markdown-to-HTML converter with advanced visual components, but it contains significant security vulnerabilities in 'scripts/md_to_page.py'. Specifically, the 'embed_images_in_md' function is vulnerable to path traversal, allowing it to read and encode arbitrary local files (e.g., via '') into the output HTML as base64 data. Additionally, the custom Markdown parser in 'inline_md' fails to sanitize link text, creating a cross-site scripting (XSS) risk in the generated documents.