md-to-docx Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

md-to-docx is an AI agent skill. ClawSecure audited md-to-docx across 4 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 68/100 (Medium Risk). The 8 findings concentrate in Policy Violation, Obfuscation and ReDoS, including Archive file found: assets/项目需求说明书模板.docx. Archives can… and File '项目需求说明书模板.docx' extension (.docx, expected archive)…. None were rated high or critical severity.

Is md-to-docx safe?

ClawSecure audited md-to-docx and assigned a security score of 68/100 (Medium Risk), identifying 8 findings across Policy Violation and Obfuscation. Review the findings below before installing.

What did ClawSecure find in md-to-docx?

ClawSecure identified 8 findings in md-to-docx, concentrated in Policy Violation, Obfuscation and ReDoS. The most severe include Archive file found: assets/项目需求说明书模板.docx. Archives can… and File '项目需求说明书模板.docx' extension (.docx, expected archive)….

How was md-to-docx audited?

ClawSecure ran md-to-docx through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 4 files.

What does a score of 68 mean?

ClawSecure assigned md-to-docx a security score of 68/100, placing it in the Medium Risk range. This reflects 8 findings led by Policy Violation that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for md-to-docx

ClawSecure detected 8 security findings in md-to-docx, spanning Policy Violation, Obfuscation, ReDoS and Permissions Manifest.

medium · Archive file found: assets/项目需求说明书模板.docx. Archives can…. Policy Violation finding detected in assets/项目需求说明书模板.docx.
medium · File '项目需求说明书模板.docx' extension (.docx, expected archive)…. Obfuscation finding detected in assets/项目需求说明书模板.docx.
medium · Binary file 'assets/项目需求说明书模板.docx' cannot be inspected by…. Policy Violation finding detected in assets/项目需求说明书模板.docx.
medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
medium · ReDoS vulnerability: Nested quantifiers (potential…. ReDoS finding detected in md_to_docx.py:104.
medium · ReDoS vulnerability: Python regex with nested quantifiers —…. ReDoS finding detected in md_to_docx.py:104.
low · Hidden file found: assets/项目需求说明书模板.docx!/_rels/.rels.…. Obfuscation finding detected in assets/项目需求说明书模板.docx!/_rels/.rels.
info · Missing License Declaration. Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for md-to-docx

Resolve policy violations

md-to-docx trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Review obfuscated or hidden code

md-to-docx contains obfuscated or hidden content that resists review. Inspect encoded, minified or hidden files to confirm they are not concealing unexpected behavior before installing.

Fix ReDoS-prone patterns

md-to-docx contains regular expressions vulnerable to catastrophic backtracking (ReDoS). Replace vulnerable patterns, bound input length, and prefer linear-time matching so a crafted input cannot hang the agent.

Related Security Research

OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security Standards→Understanding Our 3-Layer Audit Protocol→

Related AI Agent Security Audits

user-story-splitterScore 70/100 user-story-splitterScore 70/100 requirement-breakdownScore 58/100 fsxmemoryScore 80/100 reddit-automationScore 78/100

Scanned on June 12, 2026. md-to-docx is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan