markdown-new

SUSPICIOUS. The skill's core behavior matches its stated purpose, but it routes conversions, crawl jobs, and optional file uploads through markdown.new rather than Cloudflare's documented official API endpoints. That makes the main concern data-flow/intermediary trust, not malware: proportionate capability, no installer or credential harvesting, but medium risk if users upload sensitive files or rely on implied Cloudflare ownership.