Md2docx

Markdown 转 Word 文档（标准公文格式）。使用 Pandoc 自动转换，支持目录/宋体排版、表格自动修复。

This skill appears to do what it says (convert Markdown to .docx using Pandoc then python-docx), but there are a few issues to check before you run it: - Missing template files: SKILL.md, README, tests and PROJECT_INFO.md reference template files (e.g., tools/standard-official-template.docx) that are not present in the file manifest. Expect tests or some conversions to fail unless you provide those templates. - Hard-coded filesystem write: tools/create_songti_template.py saves a file to a hard-coded Windows path (C:/Users/GWF/.openclaw/...). Do NOT run that script unless you review and edit the target path; it will try to write into a specific user directory and may fail or create files in unexpected places. - Code quality oddities: the package defines custom exceptions that shadow builtin names (e.g., FileNotFoundError subclass) and tests reference helper functions (validate_pandoc_available) that should be confirmed present. These are quality/maintenance issues rather than clear signs of malice. - No network/exfiltration observed: there are no HTTP calls or external endpoints in the provided files. The only external dependency is the pandoc binary invoked via subprocess; that invocation is expected for the stated purpose. Recommended actions before installing/using: 1. Inspect and/or supply the missing template(s) referenced by README/tests or remove template references if not needed. 2. Search for any other hard-coded absolute paths and edit them to safe, relative or configurable locations. 3. Run the conversion tools in a sandbox or non-production environment first (ensure Pandoc is installed and on PATH). 4. If you plan to run the auxiliary template-creation script, modify its output path to a directory you control and inspect the generated file before using it. 5. If you need higher assurance, run the included tests in an isolated environment and review the rest of the code (especially the truncated portion of md2docx.py) for any unexpected behavior. Overall: functional and plausibly benign code, but incongruities (missing assets, hard-coded paths) make it suspicious until you verify/clean those items.

Type: OpenClaw Skill Name: md2docx Version: 1.0.6 The md2docx skill is a legitimate utility for converting Markdown files to Word documents using Pandoc and the python-docx library. Analysis of the core logic in tools/md2docx.py and the instructions in SKILL.md shows no evidence of data exfiltration, malicious execution, or prompt injection. While tools/create_songti_template.py contains a hardcoded absolute path specific to the developer's environment (C:/Users/GWF/...), and there is a minor code inconsistency in the root test_md2docx.py (referencing a non-existent class), these appear to be unintentional development artifacts or bugs rather than malicious intent.