convert-md-to-pdf

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent documentation/PDF conversion skill with legitimate-looking Mermaid usage, but it carries medium risk from transitive skill installation, unseen Python dependencies, unpinned packages, and explicit Puppeteer sandbox disabling. Suspicious rather than malicious because the footprint largely matches the stated purpose and no credential collection or exfiltration is shown.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 2, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/digital-stoic-org%2Fagent-skills%2Fconvert-md-to-pdf%2F@ec749b0dbc61c460b7c333bcdb04d99a0b5568c4
Security Audit — socket — convert-md-to-pdf