md-2-pdf is an AI agent skill, created by araa47 and published at openclaw/skills. ClawSecure audited md-2-pdf across 3 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 75/100 (Medium Risk). The 6 findings concentrate in Transitive Trust Abuse, Policy Violation and Permissions Manifest, including Detects indirect prompt injection via instruction manipulation from... and Detects indirect prompt injection via instruction manipulation from.... None were rated high or critical severity.
Is md-2-pdf safe?
ClawSecure audited md-2-pdf and assigned a security score of 75/100 (Medium Risk), identifying 6 findings across Transitive Trust Abuse and Policy Violation. Review the findings below before installing.
What did ClawSecure find in md-2-pdf?
ClawSecure identified 6 findings in md-2-pdf, concentrated in Transitive Trust Abuse, Policy Violation and Permissions Manifest. The most severe include Detects indirect prompt injection via instruction manipulation from... and Detects indirect prompt injection via instruction manipulation from....
How was md-2-pdf audited?
ClawSecure ran md-2-pdf through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 3 files from openclaw/skills.
What does a score of 75 mean?
ClawSecure assigned md-2-pdf a security score of 75/100, placing it in the Medium Risk range. This reflects 6 findings led by Transitive Trust Abuse that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for md-2-pdf
ClawSecure detected 6 security findings in md-2-pdf, spanning Transitive Trust Abuse, Policy Violation and Permissions Manifest.
- medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:9. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:12. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:13. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
SKILL.md:16. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in
SKILL.md.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for md-2-pdf
Resolve policy violations
Add a config.json permissions manifest
Pin dependencies to exact versions
1.2.3 instead of ^1.2.3) to keep unauthorized code out of your dependency tree. ClawSecure checks every dependency against known CVE databases.Related Security Research
OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security Standards→Understanding Our 3-Layer Audit Protocol→Related AI Agent Security Audits
Scanned on February 7, 2026. md-2-pdf is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.