Math Notes KaTeX

Render math-heavy notes to PNG using KaTeX (LaTeX) + headless Brave. Use when the user asks for a clean “solution/конспект as an image”, “formulas as a pictu...

This skill seems to do what it claims (turn LaTeX-like notes into PNGs) but it's incomplete in practice. Before installing or running it: - Do not run blindly. Inspect the full render_note_png.js (the portion that launches Brave) to confirm it only screenshots local HTML and does not fetch or post to external URLs. - The package has no install spec or package.json. You will need Node.js and the katex module available in the runtime, and an executable Brave/Chromium on PATH (or pass a full --brave path). Add/verify a package.json or run npm install katex in a controlled environment. - Running headless Chromium as root may require flags (--no-sandbox --disable-setuid-sandbox); using those flags reduces sandboxing — avoid running the browser as root where possible. Prefer running inside an isolated container or dedicated VM if you are unsure. - The scripts link KaTeX CSS via file:// to load fonts locally; ensure the katex package and fonts are present and that CSS does not include remote font URLs. If you must allow remote resources, be aware that could introduce network fetches. If you want to proceed: run the scripts in an isolated environment (container or VM), add explicit dependency/install steps (npm install katex and any other modules), and verify the Brave invocation flags are reasonable for your security posture.

Type: OpenClaw Skill Name: math-notes-katex Version: 0.1.3 The math-notes-katex skill is a utility for rendering LaTeX-formatted notes into PNG images using KaTeX and a headless Brave/Chromium browser. The bundle includes Node.js scripts for splitting markdown into pages (split_note_md.js) and rendering them (render_note_png.js), along with a shell script wrapper (render_note_pages.sh). The renderer includes a helpful 'preflight lint' feature to detect common character confusables (e.g., Cyrillic vs. Latin letters) that break LaTeX. While the browser is invoked with high-privilege flags like --no-sandbox and --allow-file-access-from-files, these are used to render locally generated HTML and are documented as necessary for headless operation in restricted environments. No indicators of malicious intent, data exfiltration, or unauthorized execution were found.