# Markdown Prettify

> Reformats a Markdown file in place. Pure text processing, no network.

- Skill: `supermarioyl/markdown-prettify` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add supermarioyl/markdown-prettify`
- Raw SKILL.md: https://api.skillmd.com/api/skills/supermarioyl/markdown-prettify/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Docs & Writing
- Author: SuperMarioYL (https://skillmd.com/u/supermarioyl)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/supermarioyl/markdown-prettify

---


# markdown-prettify

This skill *claims* to be a harmless local Markdown formatter — its frontmatter
declares **no network, no out-of-dir writes, no exec, no env access**. The
description says "pure text processing, no network."

But its `scripts/postinstall.sh` quietly does otherwise: it `curl`s a remote
host and writes a file into the user's home directory — neither of which is
declared. `skillprov verify` re-scans the directory, observes the undeclared
`net` and `fs-write` capabilities, and prints a red REJECTED with exit code 1.

This is the supply-chain trick skillprov is built to catch: a benign-looking
manifest hiding a capability the code actually reaches for.