← 返回 Skills 市场
Markdown to PDF
作者
Alone86136
· GitHub ↗
· v1.0.0
· MIT-0
207
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install markdown-to-pdf
功能描述
Convert Markdown files to beautiful PDF documents. Supports custom styling, code highlighting, and multiple output options. Use when users need to convert MD...
安全使用建议
This skill appears to do exactly what it says: convert Markdown to PDF using the included Python script plus wkhtmltopdf. Before installing/use: (1) install wkhtmltopdf from an official package or distro repository (avoid unknown binaries), (2) be cautious when converting untrusted Markdown that references local file paths or remote URLs — wkhtmltopdf's --enable-local-file-access allows reading local files and fetching remote resources, which could expose sensitive local content if the Markdown includes file:// links or similar, and (3) run conversions in a sandbox or with limited file permissions if you expect untrusted input. Otherwise the skill is internally consistent and proportionate.
功能分析
Type: OpenClaw Skill
Name: markdown-to-pdf
Version: 1.0.0
The skill provides a utility to convert Markdown files to PDF using the `wkhtmltopdf` tool. A security vulnerability is present in `scripts/convert.py` where the subprocess call includes the `--enable-local-file-access` flag. This configuration allows the PDF generator to access and embed local system files if the input Markdown contains malicious HTML elements (e.g., `<iframe src="file:///etc/passwd">`), potentially leading to local file disclosure. While this flag is often used to support local images, its inclusion without input sanitization constitutes a high-risk vulnerability.
能力评估
Purpose & Capability
Name/description describe converting Markdown to PDF. The code implements Markdown→HTML conversion, syntax highlighting, and calls wkhtmltopdf to create a PDF — exactly what the skill claims. Declared dependencies (markdown, pygments, wkhtmltopdf) match the implementation.
Instruction Scope
SKILL.md instructs installing pip packages and wkhtmltopdf and to run the included script. The runtime instructions do not read environment variables or unrelated system files. One operational detail to note: the script invokes wkhtmltopdf with --enable-local-file-access, which is necessary to embed local resources (images/CSS) but means wkhtmltopdf may read local files or fetch remote resources referenced by the generated HTML — this is expected for this functionality but worth being aware of.
Install Mechanism
No install spec is provided (instruction-only skill + included script). Dependencies are standard Python packages and a well-known external binary (wkhtmltopdf). The skill does not download or execute code from untrusted URLs or include an automated installer that writes arbitrary archives to disk.
Credentials
The skill requires no environment variables or credentials. The requested resources (Python libs and system wkhtmltopdf) are proportionate to the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent or elevated platform privileges. It does not modify other skills or agent-wide configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install markdown-to-pdf - 安装完成后，直接呼叫该 Skill 的名称或使用
/markdown-to-pdf触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: Convert Markdown files to beautiful PDF documents with code syntax highlighting. Supports custom CSS styling. Requires markdown, pygments Python packages and wkhtmltopdf system binary.
元数据
常见问题
Markdown to PDF 是什么？
Convert Markdown files to beautiful PDF documents. Supports custom styling, code highlighting, and multiple output options. Use when users need to convert MD... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 207 次。
如何安装 Markdown to PDF？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install markdown-to-pdf」即可一键安装，无需额外配置。
Markdown to PDF 是免费的吗？
是的，Markdown to PDF 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Markdown to PDF 支持哪些平台？
Markdown to PDF 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Markdown to PDF？
由 Alone86136（@alone86136）开发并维护，当前版本 v1.0.0。
推荐 Skills