Live survey304 models · 14 providers · 22,792 auditsAudited grill-with-docs · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

doc-to-markdown

skill · daymade/claude-code-skillsMIT licenceAudited 31 Oct 2026 · source 5ed779aacda4

★ 1,507pushed today
✓SAFEGrade B · 89/100 · 31 Oct 2026 · 5ed779a
1,507repo stars · whole daymade/claude-code-skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 5ed779aacda4 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Converts DOCX/PDF/PPTX and saved HTML/HTM to high-quality Markdown with automatic post-processing. Fixes pandoc grid tables, simple tables, image paths, CJK bold spacing, attribute noise, and code blocks; for PDFs also…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “doc-to-markdown (daymade/claude-code-skills)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/daymade/doc-to-markdown

Trust audit

Audit 0.4.1 · source read 31 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium3 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS1
L1 Static sourceSecrets, path traversal, supply chain, hidden codePASS2
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (3)

LOWFilesystem / pathfs.traversal · scripts/test_reader_pilot_gate.py:365
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
'<img src="../../escape.png">', '<a href="next.html">Next</a>', '<img src="missing.png">',
Why
No further detail recorded for this rule.
Fix
—
LOWObfuscation / stealthobf.decode_call · scripts/test_html_to_markdown.py:210
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
svg = base64.b64decode(encoded.group(1)).decode()
Why
No further detail recorded for this rule.
Fix
—

Audit 0.4.1 · source sha 5ed779aacda4 · 31 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherdaymade GitHub userOwner of the repository this skill is read from
  • Source folderdaymade/claude-code-skills/daymade-docs/doc-to-markdownThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict5ed779aacda4A new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Converts DOCX/PDF/PPTX and saved HTML/HTM to high-quality Markdown with automatic post-processing. Fixes pandoc grid tables, simple tables, image paths, CJK bold spacing, attribute noise, and code blocks; for PDFs also…

---
name: doc-to-markdown
disable-model-invocation: true
description: >-
  Converts DOCX/PDF/PPTX and saved HTML/HTM to high-quality Markdown with automatic post-processing. Fixes pandoc grid tables, simple tables, image paths, CJK bold spacing, attribute noise, and code blocks; for PDFs also strips OCR garbage blocks, repeated headers/footers/watermarks, and absolute image paths from pymupdf4llm output. Trigger on "convert document", "docx to markdown", "parse word", "doc to markdown", "解析word", "转换文档", "HTML to Markdown".
---

# Doc to Markdown

Convert documents to high-quality markdown with intelligent multi-tool orchestration and automatic DOCX post-processing.

**Architecture**: Format-specific converters with automatic post-processing.

## Quick Start

```bash
# DOCX → Markdown
uv run --with pymupdf --with pymupdf4llm --with "markitdown[pdf]" scripts/convert.py document.docx -o output.md --assets-dir ./media

# PDF → Markdown
uv run --with pymupdf --with pymupdf4llm --with "markitdown[pdf]" scripts/convert.py document.pdf -o output.md

# Saved HTML → Markdown (Pandoc required; no remote fetching)
uv run scripts/convert.py page.html -o page.md

# Run tests
uv run --with pytest pytest scripts/test_convert.py -v
```

## Conversion Modes

| Mode | Speed | Selection | Use Case |
|------|-------|---------|----------|
| **Quick** (default) | Fast | Single converter | Drafts, simple documents |
| **Heavy** | Slower | Compares converter candidates | Complex layouts needing source review |

## Tool Selection

Read [`select_tools`](scripts/convert.py) for format preferences and availability
filtering. HTML/HTM follows the [saved HTML procedure](references/html-conversion.md).
For Heavy Mode selection and failure handling, read
[its procedure](references/heavy-mode-guide.md#selection-behavior).

## PDF Manuals And Question Banks

Before delivering a PDF conversion or changing its structure, follow the
[PDF acceptance procedure](references/pdf-acceptance.md). It owns source comparison,
structural review, actual-reader checks and original-file handoff.

## Saved HTML And Website Manuals

For HTML/HTM, read [references/html-conversion.md](references/html-conversion.md)
before converting. Use `scripts/convert.py`; the default converts the whole body
and does not trim navigation. An explicit `--html-selector` selects exactly one
tag, `#id` or `.class`. `--html-heading-offset` shifts parsed headings for assembly
and rejects overflow beyond H6. Relative assets are not downloaded or copied.

Verify source `href` occurrences against the emitted Markdown AST, then rerun
`scripts/html_to_markdown.py` after cleanup or merging. For manuals, map the book,
chapters, lessons and internal headings before assembly; preserve code fences and
reconcile rewritten anchors. Conversion success does not certify that figures
are readable inside the recipient's actual Markdown reader.

## DOCX Post-Processing (automatic)

When converting DOCX via pandoc, these cleanups are applied automatically:

| Problem | Fix | Test coverage |
|---------|-----|---------------|
| Grid tables (`+:---+`) | Single-column → blockquote, multi-column → pipe table | `TestPostprocessPipeline` |
| Simple tables (`  ---- ----`) | Multi-column images → pipe table with captions | `TestSimpleTable` |
| Image path nesting (`media/media/`) | Flatten to `media/`, absolute → relative | `test_stats_tracking` |
| Pandoc attributes (`{width="..."}`) | Removed | `test_pandoc_attributes_removed` |
| CJK bold spacing (`**粗体**中文`) | Add space around `**` for CJK bold spans | `TestCjkBoldSpacing` |
| Indented dashed code blocks | → fenced ``` with language detection | `test_code_block_with_language` |
| Escaped brackets (`\[...\]`) | → `[...]` | `test_escaped_brackets_fixed` |
| Double-bracket links (`[[text]](url)`) | → `[text](url)` | `test_double_bracket_links_fixed` |

## PDF Post-Processing (automatic)

When converting PDF via pymupdf4llm, these cleanups are applied automatically (skip with `--no-postprocess`):

| Problem | Fix | Test coverage |
|---------|-----|---------------|
| Tesseract OCR garbage on image regions (`<!-- Start of picture text -->...`) | Block removed; images themselves kept | `TestStripOcrPictureText` |
| Repeated header/footer/watermark lines (including diagonal watermarks) | Detected via pymupdf cross-page scan, removed from markdown; bold-wrapped and merged-with-page-number variants also caught | `TestRepeatingLines` |
| Absolute image paths (`![](/abs/tmp/assets/...)`) | Rewritten relative to the output markdown file (portable output) | `TestImagePathsRelative` |

For engine availability and failure handling, read [Heavy Mode selection](references/heavy-mode-guide.md#selection-behavior).

**Known limits:**
- pymupdf4llm may emit duplicated paragraphs (source text layer has only one copy) — not auto-fixed; spot-check.
- Dotted TOC pages get detected as tables — rewrite the TOC manually if it matters.
- Cross-page tables are NOT merged (each page's fragment keeps its own header row) — merge manually.
- Table cells overlapped by diagonal watermarks can contain watermark character shards (`dn`, `uFE`, ...); the repeating-line stripper removes full lines only, not intra-cell shards. Watermark-heavy PDFs need cell-level rebuild (collect non-watermark spans per cell bbox).
- Complex infographics (dense in-image text) come out as images only; transcribing in-image text needs a VLM pass, not this tool.

### CJK Bold Spacing — why and how

DOCX uses run-level styling (no spaces between bold/normal runs in CJK text). Markdown renderers need whitespace around `**` to recognize bold boundaries.

**Rule**: if a `**content**` span contains any CJK character, ensure both sides have a space — unless already spaced or at line boundary. This handles CJK punctuation, emoji adjacency, and mixed content.

```
Before: 打开**飞书**,就可以    → some renderers fail to bold
After:  打开 **飞书** ,就可以  → inspect bold rendering in the target reader
```

## Heavy Mode 

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 5ed779a

Download folder ↗
uv run --with pymupdf --with pymupdf4llm --with "markitdown[pdf]" scripts/convert.py document.docx -o output.md --assets-di
uv run --with pymupdf --with pymupdf4llm --with "markitdown[pdf]" scripts/convert.py document.pdf -o output.md
uv run scripts/convert.py page.html -o page.md
uv run --with pytest pytest scripts/test_convert.py -v
uv run --with pymupdf scripts/extract_pdf_images.py document.pdf -o ./extracted-images
uv run --with pymupdf scripts/extract_pdf_images.py document.pdf --markdown refs.md

Commands as the repository documents them: shown, never run by us. Our verdict covers commit 5ed779aacda4 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
OpenClawMentioned in its text, not testedSkills for OpenClaw · About OpenClaw
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 5ed779aacda4

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/daymade/doc-to-markdown/badge.svg)](https://modelsatlas.com/skills/daymade/doc-to-markdown/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/daymade/doc-to-markdown/badge.svg)](https://modelsatlas.com/skills/daymade/doc-to-markdown/)

Questions about doc-to-markdown

What does the doc-to-markdown skill do?
Professional Claude Code skills marketplace featuring production-ready skills for enhanced development workflows.
Is doc-to-markdown safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can doc-to-markdown access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does doc-to-markdown work with?
Its documentation mentions openclaw. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (5ed779aacda4), read on 2026-10-31. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.