← 返回 Skills 市场
705
总下载
0
收藏
4
当前安装
1
版本数
在 OpenClaw 中安装
/install markdown-to-pdf-styled
功能描述
Convert Markdown files to styled PDFs using pandoc and wkhtmltopdf with built-in or custom CSS style options.
安全使用建议
This skill appears to be what it claims: a simple Markdown→PDF converter using pandoc and wkhtmltopdf. Before installing/using it: 1) ensure pandoc and wkhtmltopdf (and a POSIX shell) are installed—the package metadata does not list these binaries even though the docs and script require them; 2) be aware the script enables wkhtmltopdf's --enable-local-file-access so the PDF renderer can read local resources—avoid converting untrusted Markdown/CSS on sensitive systems or run in a sandbox; 3) if you need network isolation, note wkhtmltopdf can fetch remote resources referenced from your Markdown or CSS (fonts, images); 4) inspect any custom CSS you pass in (or bundled CSS) if you have stricter security requirements. Otherwise the skill contains no hidden network endpoints or credential requests.
功能分析
Type: OpenClaw Skill
Name: markdown-to-pdf-styled
Version: 1.0.0
The skill is classified as suspicious due to a significant Local File Disclosure (LFD) and Server-Side Request Forgery (SSRF) vulnerability. The `scripts/md2pdf.sh` script explicitly enables `wkhtmltopdf`'s `--enable-local-file-access` option, as noted in `SKILL.md`. This allows the PDF generation process to access local files or make network requests based on content within the user-provided Markdown file or a custom CSS file, potentially leading to unauthorized data exposure or internal network probing.
能力评估
Purpose & Capability
Name/description match the included files and script: the md2pdf.sh script and CSS assets implement Markdown→PDF conversion with style options. However, registry metadata lists no required binaries while SKILL.md and the script clearly require pandoc and wkhtmltopdf (and a POSIX shell). This is a metadata omission rather than malicious behavior.
Instruction Scope
SKILL.md instructs the agent to run the included bash script and to ensure pandoc/wkhtmltopdf are installed. The script only reads the provided input markdown, an output path, and a CSS file (either bundled or a user-specified absolute path). It does not exfiltrate data or call external endpoints itself. Note: the script passes --enable-local-file-access to wkhtmltopdf to allow loading local CSS/assets, which is necessary for the stated function but can enable local file reads by the PDF engine.
Install Mechanism
There is no install spec (instruction-only plus a script and assets). That minimizes install-time risk because nothing is downloaded or executed automatically beyond the provided script. The script is plain shell and the CSS files are static.
Credentials
The skill requests no environment variables, credentials, or config paths. This is proportionate to its purpose (local file conversion).
Persistence & Privilege
The skill is not always-enabled and does not request persistent system changes or modify other skills. It runs as an on-demand script using normal user privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install markdown-to-pdf-styled - 安装完成后，直接呼叫该 Skill 的名称或使用
/markdown-to-pdf-styled触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
初始版本 - 使用 pandoc + wkhtmltopdf 转换 Markdown 为 PDF，支持多种样式模板（clean/modern/paper）
元数据
常见问题
Markdown to PDF (Styled) 是什么？
Convert Markdown files to styled PDFs using pandoc and wkhtmltopdf with built-in or custom CSS style options. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 705 次。
如何安装 Markdown to PDF (Styled)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install markdown-to-pdf-styled」即可一键安装，无需额外配置。
Markdown to PDF (Styled) 是免费的吗？
是的，Markdown to PDF (Styled) 完全免费（开源免费），可自由下载、安装和使用。
Markdown to PDF (Styled) 支持哪些平台？
Markdown to PDF (Styled) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Markdown to PDF (Styled)？
由 mengwuzhi（@mengwuzhi）开发并维护，当前版本 v1.0.0。
推荐 Skills