Skill Scanner · md-to-docx

independent scanner by Cisco AI Defense · skill by brycewang-stanford · how it works ↗

PASSmax severity: MEDIUM

Code uses search/grep patterns but Grep tool not in allowed-tools; Skill does not specify a license; Archive file detected in skill package; +4 more

scanned 2026-08-22

Findings (7)

LOWunauthorized_tool_use

Code uses search/grep patterns but Grep tool not in allowed-tools

C:\Users\mkyou\Documents\GitHub\Skillmd\apps\ingest\out\audit-local\skills\38506\SKILL.md

INFOpolicy_violation

Skill does not specify a license

SKILL.md

MEDIUMpolicy_violation

Archive file detected in skill package

chinese_template.docx

MEDIUMobfuscation

File extension does not match actual content type

chinese_template.docx

MEDIUMpolicy_violation

Unanalyzable binary file

chinese_template.docx

LOWobfuscation

Hidden data file detected

chinese_template.docx!/_rels/.rels

MEDIUMunauthorized_tool_use

Attempting to install system packages with elevated privileges

convert_md_to_docx.py:325

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASSthis skill

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAIL

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete