md-to-office

Converts Markdown files to PDF files using the pandoc command-line utility. Use when a user asks to convert a .md or markdown file to a .pdf file.

This skill appears to be a straightforward pandoc usage guide, but there are some gaps you should address before installing/using it: 1) Verify that pandoc (and a LaTeX engine like xelatex if you need PDF output) is present on the agent host — the skill does not declare this dependency. 2) Be aware the skill's examples include reading local template/reference files and fetching URLs; ensure the agent has permission only to read intended input files and that you do not convert sensitive files unintentionally. 3) Because there's no source or homepage, you cannot verify provenance — prefer skills with a known source. 4) Ask the skill author to declare required binaries and add pre-run checks (e.g., validate pandoc exists, confirm file paths, and limit network fetches) before granting it invocation. If you decide to try it, test on non-sensitive sample files first.

Type: OpenClaw Skill Name: pandic-office Version: 1.0.0 The skill is classified as suspicious due to its explicit documentation in `SKILL.md` demonstrating the ability to fetch content from arbitrary URLs using `pandoc -f html -t markdown https://www.fsf.org`. While `pandoc` is a legitimate tool, this example teaches the AI agent a broad network access capability that could be leveraged via prompt injection to fetch sensitive internal resources or external malicious content, extending beyond the stated purpose of converting local Markdown files.