md2img

Convert Markdown (inline text or a `.md` file path) into a single PNG image using local code (Markdown -> HTML -> headless browser screenshot). Use when the...

This skill appears coherent for converting Markdown to a single PNG, but consider the following before installing or running it: (1) The script will fetch remote images referenced in the Markdown (HTTP(S) GETs with a custom User-Agent) and will read local image files referenced by paths in the Markdown — so embedding attacker-controlled URLs will cause outbound requests that reveal your machine's IP to those hosts. (2) The SKILL.md recommends installing playwright and running `playwright install chromium`, which will download Chromium — perform this in a sandboxed environment or VM if you are cautious. (3) If `bleach` is not installed the script falls back to a weaker regex-based sanitizer; for safer handling of untrusted Markdown, install bleach. (4) Avoid running this with elevated privileges and don't point it at Markdown that references sensitive local files you don't want read. If these behaviors are acceptable, the skill is coherent and usable.

Type: OpenClaw Skill Name: md2img Version: 1.0.0 The skill provides Markdown-to-PNG conversion but contains a significant vulnerability in `scripts/md_to_png.py`. The `_inline_images_in_html` function allows reading and inlining arbitrary local files (LFI) and making outbound HTTP requests (SSRF) via the `src` attribute of `<img>` tags. Specifically, it explicitly resolves absolute filesystem paths (e.g., `/etc/passwd`), which could be exploited to exfiltrate sensitive system data by rendering it into the output image. While the script uses the `bleach` library for HTML sanitization, the subsequent image processing logic bypasses protocol restrictions for local file access.