Skills baoyu-markdown-to-html

📦

baoyu-markdown-to-html

Content revision r1 High Risk ⚙️ External commands📁 Filesystem access⚡ Contains scripts🌐 Network access🔑 Env variables

Convert Markdown to Styled HTML

Publishing Markdown to WeChat-compatible HTML can require careful formatting and inline styles. This skill converts Markdown files into themed HTML with diagrams, math, alerts, and code highlighting.

Supports: Claude Codex Code(CC)

This skill is part of a pack

Install the whole pack to get every skill the task needs, in one command.

Docs Publishing Kit · 3 skills Install whole pack

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "baoyu-markdown-to-html" from https://skillstore.io/skills/jimliu-baoyu-markdown-to-html.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-markdown-to-html/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/jimliu-baoyu-markdown-to-html.md Signed manifest GET /api/skills/jimliu-baoyu-markdown-to-html/manifest Signed lockfile GET /api/skills/jimliu-baoyu-markdown-to-html/lockfile

Test it

Using "baoyu-markdown-to-html". A Markdown article with frontmatter, headings, code blocks, alerts, and local images.

Expected outcome:

An HTML article is created beside the Markdown file, with themed styling and a list of image mappings.

Using "baoyu-markdown-to-html". A technical guide that contains Mermaid, PlantUML, math, and footnotes.

Expected outcome:

The guide is rendered as styled HTML with diagram placeholders, formatted equations, highlighted code, and footnote sections.

Using "baoyu-markdown-to-html". An existing article.html is present before conversion.

Expected outcome:

The previous HTML file is backed up with a timestamp, then the new themed HTML file is written.

Security Audit

High Risk

v4 • 7/5/2026 Open versioned report

Confirmed risks include external npx/Bun execution, broad local file reads and writes, remote resource fetching, remote dynamic imports, and unsafe HTML insertion surfaces. Most backtick, regex exec, SVG coordinate, CSS border, and JSFuck heuristic hits are false positives from normal TypeScript and markup. No evidence of prompt injection text was found in SKILL.md or the scanned scripts.

20

Files scanned

3,739

Lines analyzed

52

Review items

0

False positives ignored

Confirmed security concerns (3)

High

scripts/md/render.ts:395-414 scripts/md/extensions/ruby.ts:91-120 scripts/md/extensions/slider.ts:57-60

Unsanitized Markdown HTML Output

Markdown-derived values are interpolated into HTML attributes and element bodies without consistent escaping. Malicious Markdown can produce active HTML when the output is opened or pasted into a privileged editor.

The renderer directly interpolates href, title, alt, ruby text, and slider captions into HTML strings. I did not find a sanitizer applied before the final HTML is written.

High

scripts/main.ts:80-89 scripts/main.ts:229-236

User-Controlled Remote Resource Fetching

Markdown image URLs beginning with http or https are downloaded during conversion. This can disclose network metadata or fetch attacker-controlled content when converting untrusted Markdown.

The code explicitly branches on http and https image paths, downloads them, and reports local mappings. The URL originates from Markdown image syntax collected earlier in the conversion.

High

scripts/md/render.ts:349-353 scripts/md/utils/languages.ts:80-112 scripts/md/utils/languages.ts:191-205

Remote Dynamic Import from Markdown Language Names

Unknown code block languages can be carried into a pending language attribute and later used to build a CDN import URL. This can load remote JavaScript based on document content.

The renderer stores an unregistered language name in HTML attributes, and the utility later imports grammarUrlFor(language). The exact caller path is browser-dependent, so confidence is high but not absolute.

Capability review items (52)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/main.ts:9

Node.js child_process module

import { spawnSync } from 'node:child_process';

The file imports node:child_process and the module is used later to invoke npx. This is real external command capability in the skill runtime.

High

scripts/main.ts:203

Synchronous spawn

const result = spawnSync('npx', args, {

spawnSync executes npx with Bun to run the renderer. The arguments are mostly controlled, but it still executes an external toolchain from the skill.

High

scripts/md/extensions/plantuml.ts:170

outerHTML assignment (XSS risk)

placeholderElement.outerHTML = createPlantUMLHTML(imageUrl, options, svgContent)

PlantUML inline rendering replaces an element with HTML built from fetched SVG content. Embedding remote SVG through outerHTML is a real injection surface.

High

scripts/md/utils/languages.ts:112

Dynamic import() expression

const module = await import(/* @vite-ignore */ grammarUrlFor(language))

The language highlighter dynamically imports a module URL built from a language name. If the language comes from Markdown, this can load remote code from the configured CDN.

Medium

scripts/main.ts:42

Node.js fs operations

fs.unlinkSync(destPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/main.ts:50

Node.js fs operations

fs.unlinkSync(destPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/main.ts:64

Node.js fs operations

fs.unlink(destPath, () => {});

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/main.ts:123

Node.js fs operations

const content = fs.readFileSync(markdownPath, 'utf-8');

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/main.ts:224

Node.js fs operations

fs.renameSync(finalHtmlPath, backupPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/main.ts:227

Node.js fs operations

fs.copyFileSync(tempHtmlPath, finalHtmlPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/main.ts:239

Node.js fs operations

let htmlContent = fs.readFileSync(finalHtmlPath, 'utf-8');

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/main.ts:244

Node.js fs operations

fs.writeFileSync(finalHtmlPath, htmlContent, 'utf-8');

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/main.ts:123

Synchronous file operations

const content = fs.readFileSync(markdownPath, 'utf-8');

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

Medium

scripts/main.ts:239

Synchronous file operations

let htmlContent = fs.readFileSync(finalHtmlPath, 'utf-8');

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

Medium

scripts/main.ts:244

Synchronous file operations

fs.writeFileSync(finalHtmlPath, htmlContent, 'utf-8');

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

Medium

scripts/main.ts:35

File stream creation

const file = fs.createWriteStream(destPath);

The code creates a writable file stream for downloaded image content. This is real file creation based on conversion inputs.

Medium

scripts/main.ts:190

Temp directory access

const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'markdown-to-html-'));

The converter creates a temporary directory under the OS temp path and stores intermediate Markdown and assets there. Sensitive input could remain outside the project directory.

Medium

scripts/md/extensions/infographic.ts:77

innerHTML assignment (XSS risk)

container.innerHTML = `<div style="color: red; padding: 10px; border: 1px solid red;">Infographic 渲染

The catch block writes an error message into innerHTML. Error text may include untrusted content, so this is a plausible DOM injection risk.

Medium

scripts/md/extensions/plantuml.ts:193

Fetch API call

const response = await fetch(svgUrl)

fetch retrieves PlantUML SVG content from the generated diagram URL. This is real outbound network access during inline diagram rendering.

Medium

scripts/md/extensions/plantuml.ts:241

Hardcoded URL

serverUrl: options.serverUrl || `https://www.plantuml.com/plantuml`,

This is the default PlantUML server used for diagram rendering. Markdown diagrams can cause requests to this external service.

Medium

scripts/md/render.ts:81

Node.js fs operations

const content = fs.readFileSync(configPath, "utf-8");

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/md/render.ts:677

Node.js fs operations

baseCss: fs.readFileSync(basePath, "utf-8"),

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/md/render.ts:678

Node.js fs operations

themeCss: fs.readFileSync(themePath, "utf-8"),

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/md/render.ts:829

Node.js fs operations

const markdown = fs.readFileSync(inputPath, "utf-8");

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/md/render.ts:865

Node.js fs operations

fs.renameSync(outputPath, backupPath);

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/md/render.ts:868

Node.js fs operations

fs.writeFileSync(outputPath, finalHtml, "utf-8");

This is a real filesystem operation used to read, write, copy, rename, or delete conversion files. It is expected behavior but can affect user-selected paths.

Medium

scripts/md/render.ts:81

Synchronous file operations

const content = fs.readFileSync(configPath, "utf-8");

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

Medium

scripts/md/render.ts:677

Synchronous file operations

baseCss: fs.readFileSync(basePath, "utf-8"),

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

Medium

scripts/md/render.ts:678

Synchronous file operations

themeCss: fs.readFileSync(themePath, "utf-8"),

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

Medium

scripts/md/render.ts:829

Synchronous file operations

const markdown = fs.readFileSync(inputPath, "utf-8");

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

Medium

scripts/md/render.ts:868

Synchronous file operations

fs.writeFileSync(outputPath, finalHtml, "utf-8");

The renderer performs synchronous reads or writes on local files during conversion. This is intentional but creates real filesystem access risk.

Medium

scripts/md/utils/languages.ts:202

innerHTML assignment (XSS risk)

codeBlock.innerHTML = highlighted

The highlighter writes generated HTML into a code element with innerHTML. highlight.js usually escapes code, but this remains a DOM insertion sink.

Medium

scripts/md/utils/languages.ts:80

Hardcoded URL

const HLJS_CDN_BASE = `https://cdn-doocs.oss-cn-shenzhen.aliyuncs.com/npm/highlightjs/${HLJS_VERSION

This URL is the CDN base used by dynamic language loading. It can be contacted when loading additional highlight.js grammars.

Medium

Hidden file access

test -f "$HOME/.baoyu-skills/baoyu-markdown-to-html/EXTEND.md" && echo "user"

SKILL.md instructs the agent to check a hidden .baoyu-skills EXTEND.md path, including a user-home location. This is intentional configuration access but reaches hidden files.

Medium

Hidden file access

│ $HOME/.baoyu-skills/baoyu-markdown-to-html/EXTEND.md │ User home │

SKILL.md instructs the agent to check a hidden .baoyu-skills EXTEND.md path, including a user-home location. This is intentional configuration access but reaches hidden files.

Low

scripts/main.ts:86

Node.js fs stat operations

if (!fs.existsSync(localPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/main.ts:214

Node.js fs stat operations

if (!fs.existsSync(tempHtmlPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/main.ts:221

Node.js fs stat operations

if (fs.existsSync(finalHtmlPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/main.ts:321

Node.js fs stat operations

if (!fs.existsSync(markdownPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/main.ts:190

Temp file creation

const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'markdown-to-html-'));

The same temp directory is used for generated intermediate files. This is expected but can leave temporary copies of source content.

Low

scripts/md/render.ts:67

Node.js fs stat operations

if (!fs.existsSync(dir)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/md/render.ts:78

Node.js fs stat operations

if (!fs.existsSync(configPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/md/render.ts:101

Node.js fs stat operations

fs.existsSync(path.join(THEME_DIR, `${name}.css`))

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/md/render.ts:102

Node.js fs stat operations

|| fs.existsSync(path.join(EXTERNAL_THEME_DIR, `${name}.css`))

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/md/render.ts:658

Node.js fs stat operations

fs.existsSync(candidate)

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/md/render.ts:661

Node.js fs stat operations

fs.existsSync(candidate)

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/md/render.ts:817

Node.js fs stat operations

if (!fs.existsSync(inputPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/md/render.ts:863

Node.js fs stat operations

if (fs.existsSync(outputPath)) {

The code checks filesystem paths with existsSync before reading or writing. This is legitimate but still observes local path state.

Low

scripts/md/render.ts:36

Environment variable access (dot notation)

process.env.MD_THEME_CONFIG_PATH

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

Low

scripts/md/render.ts:39

Environment variable access (dot notation)

process.env.MD_THEME_DIR

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

Low

scripts/md/render.ts:36

Environment variable object

process.env.MD_THEME_CONFIG_PATH

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

Low

scripts/md/render.ts:39

Environment variable object

process.env.MD_THEME_DIR

The renderer reads MD_THEME_CONFIG_PATH and MD_THEME_DIR from process.env to choose theme sources. These are configuration variables, not direct secret exfiltration.

Risk Factors

⚙️ External commands (366)

scripts/main.ts:9 scripts/main.ts:203 scripts/main.ts:29 scripts/main.ts:51 scripts/main.ts:84 scripts/main.ts:87 scripts/main.ts:170 scripts/main.ts:183-188 scripts/main.ts:188 scripts/main.ts:198-210 scripts/main.ts:210-215 scripts/main.ts:215-222 scripts/main.ts:222-223 scripts/main.ts:223-241 scripts/main.ts:241-246 scripts/main.ts:246-259 scripts/main.ts:288-322 scripts/main.ts:322-331 scripts/md/extensions/alert.ts:116 scripts/md/extensions/alert.ts:26 scripts/md/extensions/alert.ts:36 scripts/md/extensions/alert.ts:47 scripts/md/extensions/alert.ts:48 scripts/md/extensions/alert.ts:52 scripts/md/extensions/alert.ts:53 scripts/md/extensions/alert.ts:57 scripts/md/extensions/alert.ts:59 scripts/md/extensions/alert.ts:66 scripts/md/extensions/alert.ts:70 scripts/md/extensions/alert.ts:75 scripts/md/extensions/alert.ts:78 scripts/md/extensions/alert.ts:83-89 scripts/md/extensions/alert.ts:89-90 scripts/md/extensions/alert.ts:90-93 scripts/md/extensions/alert.ts:93-104 scripts/md/extensions/alert.ts:104-105 scripts/md/extensions/alert.ts:105-109 scripts/md/extensions/alert.ts:109-110 scripts/md/extensions/alert.ts:110-125 scripts/md/extensions/alert.ts:125-144 scripts/md/extensions/alert.ts:144-145 scripts/md/extensions/alert.ts:145-148 scripts/md/extensions/alert.ts:148-149 scripts/md/extensions/alert.ts:149-152 scripts/md/extensions/alert.ts:152-153 scripts/md/extensions/alert.ts:153-156 scripts/md/extensions/alert.ts:156-157 scripts/md/extensions/alert.ts:157-160 scripts/md/extensions/alert.ts:160-161 scripts/md/extensions/alert.ts:161-164 scripts/md/extensions/alert.ts:164-165 scripts/md/extensions/alert.ts:165-169 scripts/md/extensions/alert.ts:169-170 scripts/md/extensions/alert.ts:170-171 scripts/md/extensions/alert.ts:171-174 scripts/md/extensions/alert.ts:174-175 scripts/md/extensions/alert.ts:175-176 scripts/md/extensions/alert.ts:176-179 scripts/md/extensions/alert.ts:179-180 scripts/md/extensions/alert.ts:180-181 scripts/md/extensions/alert.ts:181-184 scripts/md/extensions/alert.ts:184-185 scripts/md/extensions/alert.ts:185-186 scripts/md/extensions/alert.ts:186-189 scripts/md/extensions/alert.ts:189-190 scripts/md/extensions/alert.ts:190-191 scripts/md/extensions/alert.ts:191-194 scripts/md/extensions/alert.ts:194-195 scripts/md/extensions/alert.ts:195-196 scripts/md/extensions/alert.ts:196-199 scripts/md/extensions/alert.ts:199-200 scripts/md/extensions/alert.ts:200-201 scripts/md/extensions/alert.ts:201-204 scripts/md/extensions/alert.ts:204-205 scripts/md/extensions/alert.ts:205-206 scripts/md/extensions/alert.ts:206-209 scripts/md/extensions/alert.ts:209-210 scripts/md/extensions/alert.ts:210-211 scripts/md/extensions/alert.ts:211-214 scripts/md/extensions/alert.ts:214-215 scripts/md/extensions/alert.ts:215-216 scripts/md/extensions/alert.ts:216-219 scripts/md/extensions/alert.ts:219-220 scripts/md/extensions/alert.ts:220-221 scripts/md/extensions/alert.ts:221-224 scripts/md/extensions/alert.ts:224-225 scripts/md/extensions/alert.ts:225-226 scripts/md/extensions/alert.ts:226-229 scripts/md/extensions/alert.ts:229-230 scripts/md/extensions/alert.ts:230-231 scripts/md/extensions/alert.ts:231-234 scripts/md/extensions/alert.ts:234-235 scripts/md/extensions/alert.ts:235-236 scripts/md/extensions/alert.ts:236-239 scripts/md/extensions/alert.ts:239-240 scripts/md/extensions/alert.ts:240-241 scripts/md/extensions/alert.ts:241-244 scripts/md/extensions/alert.ts:244-245 scripts/md/extensions/alert.ts:245-246 scripts/md/extensions/alert.ts:246-249 scripts/md/extensions/alert.ts:249-250 scripts/md/extensions/alert.ts:250-251 scripts/md/extensions/alert.ts:251-254 scripts/md/extensions/alert.ts:254-255 scripts/md/extensions/alert.ts:255-256 scripts/md/extensions/alert.ts:256-283 scripts/md/extensions/footnotes.ts:21 scripts/md/extensions/footnotes.ts:22 scripts/md/extensions/footnotes.ts:34 scripts/md/extensions/footnotes.ts:45-49 scripts/md/extensions/footnotes.ts:51-52 scripts/md/extensions/footnotes.ts:55 scripts/md/extensions/footnotes.ts:61 scripts/md/extensions/footnotes.ts:62 scripts/md/extensions/footnotes.ts:72 scripts/md/extensions/footnotes.ts:82-84 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/infographic.ts:32 scripts/md/extensions/infographic.ts:34 scripts/md/extensions/infographic.ts:77 scripts/md/extensions/infographic.ts:91-94 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/infographic.ts:104-109 scripts/md/extensions/katex.ts:23 scripts/md/extensions/katex.ts:24 scripts/md/extensions/katex.ts:28 scripts/md/extensions/katex.ts:31 scripts/md/extensions/katex.ts:32 scripts/md/extensions/katex.ts:33 scripts/md/extensions/katex.ts:39 scripts/md/extensions/katex.ts:42 scripts/md/extensions/katex.ts:50 scripts/md/extensions/katex.ts:51 scripts/md/extensions/katex.ts:57 scripts/md/extensions/katex.ts:61 scripts/md/extensions/katex.ts:70-77 scripts/md/extensions/katex.ts:77-90 scripts/md/extensions/katex.ts:90-91 scripts/md/extensions/katex.ts:91-96 scripts/md/extensions/katex.ts:96-109 scripts/md/extensions/katex.ts:109-110 scripts/md/extensions/katex.ts:110-112 scripts/md/extensions/katex.ts:112-119 scripts/md/extensions/katex.ts:119-132 scripts/md/extensions/katex.ts:132-133 scripts/md/extensions/katex.ts:133-135 scripts/md/extensions/katex.ts:135-142 scripts/md/extensions/markup.ts:21 scripts/md/extensions/markup.ts:45 scripts/md/extensions/markup.ts:71 scripts/md/extensions/markup.ts:14 scripts/md/extensions/markup.ts:15 scripts/md/extensions/markup.ts:24 scripts/md/extensions/markup.ts:32 scripts/md/extensions/markup.ts:38 scripts/md/extensions/markup.ts:39 scripts/md/extensions/markup.ts:48 scripts/md/extensions/markup.ts:56 scripts/md/extensions/markup.ts:62 scripts/md/extensions/markup.ts:63 scripts/md/extensions/markup.ts:74 scripts/md/extensions/markup.ts:82 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/plantuml.ts:14 scripts/md/extensions/plantuml.ts:51 scripts/md/extensions/plantuml.ts:54 scripts/md/extensions/plantuml.ts:56 scripts/md/extensions/plantuml.ts:68-81 scripts/md/extensions/plantuml.ts:81-112 scripts/md/extensions/plantuml.ts:112-132 scripts/md/extensions/plantuml.ts:132-135 scripts/md/extensions/plantuml.ts:135 scripts/md/extensions/plantuml.ts:144 scripts/md/extensions/plantuml.ts:145 scripts/md/extensions/plantuml.ts:155 scripts/md/extensions/plantuml.ts:156 scripts/md/extensions/plantuml.ts:162 scripts/md/extensions/plantuml.ts:164 scripts/md/extensions/plantuml.ts:168 scripts/md/extensions/plantuml.ts:176 scripts/md/extensions/plantuml.ts:177 scripts/md/extensions/plantuml.ts:178-180 scripts/md/extensions/plantuml.ts:182-195 scripts/md/extensions/plantuml.ts:195-201 scripts/md/extensions/plantuml.ts:201-202 scripts/md/extensions/plantuml.ts:202-204 scripts/md/extensions/plantuml.ts:204-205 scripts/md/extensions/plantuml.ts:205-208 scripts/md/extensions/plantuml.ts:208-209 scripts/md/extensions/plantuml.ts:209-219 scripts/md/extensions/plantuml.ts:219 scripts/md/extensions/plantuml.ts:220-221 scripts/md/extensions/plantuml.ts:221-225 scripts/md/extensions/plantuml.ts:227-231 scripts/md/extensions/plantuml.ts:233-241 scripts/md/extensions/plantuml.ts:241-242 scripts/md/extensions/plantuml.ts:242-243 scripts/md/extensions/plantuml.ts:243-247 scripts/md/extensions/plantuml.ts:247-248 scripts/md/extensions/plantuml.ts:248-249 scripts/md/extensions/plantuml.ts:249-258 scripts/md/extensions/plantuml.ts:258-259 scripts/md/extensions/plantuml.ts:259-261 scripts/md/extensions/plantuml.ts:261-262 scripts/md/extensions/plantuml.ts:262-266 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/plantuml.ts:271-284 scripts/md/extensions/plantuml.ts:284 scripts/md/extensions/ruby.ts:31 scripts/md/extensions/ruby.ts:44 scripts/md/extensions/ruby.ts:13 scripts/md/extensions/ruby.ts:14 scripts/md/extensions/ruby.ts:15 scripts/md/extensions/ruby.ts:16 scripts/md/extensions/ruby.ts:22 scripts/md/extensions/ruby.ts:23 scripts/md/extensions/ruby.ts:34 scripts/md/extensions/ruby.ts:38 scripts/md/extensions/ruby.ts:47 scripts/md/extensions/ruby.ts:51 scripts/md/extensions/ruby.ts:66-68 scripts/md/extensions/ruby.ts:68-89 scripts/md/extensions/ruby.ts:89-91 scripts/md/extensions/ruby.ts:91-98 scripts/md/extensions/ruby.ts:98-106 scripts/md/extensions/ruby.ts:106-109 scripts/md/extensions/ruby.ts:109-117 scripts/md/extensions/ruby.ts:117-120 scripts/md/extensions/slider.ts:11 scripts/md/extensions/slider.ts:12 scripts/md/extensions/slider.ts:21 scripts/md/extensions/slider.ts:33-39 scripts/md/extensions/slider.ts:39-40 scripts/md/extensions/slider.ts:40-49 scripts/md/extensions/slider.ts:57-60 scripts/md/extensions/slider.ts:60-68 scripts/md/extensions/toc.ts:34 scripts/md/extensions/toc.ts:17 scripts/md/extensions/toc.ts:18-26 scripts/md/extensions/toc.ts:26-27 scripts/md/extensions/toc.ts:27-37 scripts/md/extensions/toc.ts:37-44 scripts/md/extensions/toc.ts:44-45 scripts/md/extensions/toc.ts:45-50 scripts/md/extensions/toc.ts:50-55 scripts/md/extensions/toc.ts:55-58 scripts/md/extensions/toc.ts:58-63 scripts/md/extensions/toc.ts:63-66 scripts/md/render.ts:101 scripts/md/render.ts:102 scripts/md/render.ts:151-155 scripts/md/render.ts:170-177 scripts/md/render.ts:177-178 scripts/md/render.ts:178-196 scripts/md/render.ts:202-241 scripts/md/render.ts:241-243 scripts/md/render.ts:243-279 scripts/md/render.ts:283-300 scripts/md/render.ts:300-334 scripts/md/render.ts:334-347 scripts/md/render.ts:347-351 scripts/md/render.ts:351-353 scripts/md/render.ts:353-355 scripts/md/render.ts:355-381 scripts/md/render.ts:381-392 scripts/md/render.ts:392-398 scripts/md/render.ts:398-399 scripts/md/render.ts:399-405 scripts/md/render.ts:405-412 scripts/md/render.ts:412-414 scripts/md/render.ts:414-438 scripts/md/render.ts:445-496 scripts/md/render.ts:496-533 scripts/md/render.ts:533-542 scripts/md/render.ts:542-572 scripts/md/render.ts:572-576 scripts/md/render.ts:576-615 scripts/md/render.ts:621-622 scripts/md/render.ts:628-634 scripts/md/render.ts:636-654 scripts/md/render.ts:654-655 scripts/md/render.ts:655-666 scripts/md/render.ts:666-672 scripts/md/render.ts:672-683 scripts/md/render.ts:702-724 scripts/md/render.ts:724-727 scripts/md/render.ts:727-730 scripts/md/render.ts:730-733 scripts/md/render.ts:733-756 scripts/md/render.ts:756-780 scripts/md/render.ts:780-784 scripts/md/render.ts:784-788 scripts/md/render.ts:788-818 scripts/md/render.ts:818-864 scripts/md/render.ts:864-871 scripts/md/render.ts:871-873 scripts/md/utils/languages.ts:79 scripts/md/utils/languages.ts:80 scripts/md/utils/languages.ts:89 scripts/md/utils/languages.ts:116 scripts/md/utils/languages.ts:134 scripts/md/utils/languages.ts:135 scripts/md/utils/languages.ts:137 scripts/md/utils/languages.ts:141 scripts/md/utils/languages.ts:145 scripts/md/utils/languages.ts:160-163 scripts/md/utils/languages.ts:163 scripts/md/utils/languages.ts:168 scripts/md/utils/languages.ts:171 scripts/md/utils/languages.ts:172-173 scripts/md/utils/languages.ts:173-174 scripts/md/utils/languages.ts:174-176 scripts/md/utils/languages.ts:181-192 scripts/md/utils/languages.ts:192-193 scripts/md/utils/languages.ts:193 scripts/md/utils/languages.ts:198-203 scripts/md/utils/languages.ts:203-204 scripts/md/utils/languages.ts:204-205 scripts/md/utils/languages.ts:205-215 scripts/md/utils/languages.ts:215-218 scripts/md/utils/languages.ts:218-232 scripts/md/utils/languages.ts:232-233 scripts/md/utils/languages.ts:233-234 SKILL.md:12 SKILL.md:16 SKILL.md:22-28 SKILL.md:28-61 SKILL.md:61-63 SKILL.md:63-64 SKILL.md:64-67 SKILL.md:67-77 SKILL.md:77-78 SKILL.md:78-79 SKILL.md:79-83 SKILL.md:83-85 SKILL.md:85-93 SKILL.md:93-95 SKILL.md:95-101 SKILL.md:101-102 SKILL.md:102-103 SKILL.md:103-104 SKILL.md:104-108 SKILL.md:108-120 SKILL.md:120-125 SKILL.md:125-126 SKILL.md:126-129 SKILL.md:129-133 SKILL.md:133-148 SKILL.md:148-154 SKILL.md:154-155 SKILL.md:155-156 SKILL.md:156-162 SKILL.md:162 SKILL.md:163 SKILL.md:164 SKILL.md:165 SKILL.md:167-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170 SKILL.md:171 SKILL.md:172-173 SKILL.md:173-174 SKILL.md:174 SKILL.md:175 SKILL.md:181-187

📁 Filesystem access (46)

scripts/main.ts:42 scripts/main.ts:50 scripts/main.ts:64 scripts/main.ts:123 scripts/main.ts:224 scripts/main.ts:227 scripts/main.ts:239 scripts/main.ts:244 scripts/main.ts:86 scripts/main.ts:214 scripts/main.ts:221 scripts/main.ts:321 scripts/main.ts:123 scripts/main.ts:239 scripts/main.ts:244 scripts/main.ts:35 scripts/main.ts:164 scripts/main.ts:190 scripts/main.ts:190 scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:81 scripts/md/render.ts:677 scripts/md/render.ts:678 scripts/md/render.ts:829 scripts/md/render.ts:865 scripts/md/render.ts:868 scripts/md/render.ts:67 scripts/md/render.ts:78 scripts/md/render.ts:101 scripts/md/render.ts:102 scripts/md/render.ts:658 scripts/md/render.ts:661 scripts/md/render.ts:817 scripts/md/render.ts:863 scripts/md/render.ts:81 scripts/md/render.ts:677 scripts/md/render.ts:678 scripts/md/render.ts:829 scripts/md/render.ts:868 scripts/md/render.ts:242 scripts/md/render.ts:404 SKILL.md:27 SKILL.md:35

⚡ Contains scripts (16)

scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:12 scripts/md/extensions/infographic.ts:77 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/markup.ts:21 scripts/md/extensions/markup.ts:45 scripts/md/extensions/markup.ts:71 scripts/md/extensions/plantuml.ts:170 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/ruby.ts:31 scripts/md/extensions/ruby.ts:44 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:329 scripts/md/render.ts:747 scripts/md/utils/languages.ts:112 scripts/md/utils/languages.ts:202

🌐 Network access (32)

scripts/md/extensions/alert.ts:21 scripts/md/extensions/alert.ts:23 scripts/md/extensions/alert.ts:153 scripts/md/extensions/alert.ts:157 scripts/md/extensions/alert.ts:165 scripts/md/extensions/alert.ts:171 scripts/md/extensions/alert.ts:176 scripts/md/extensions/alert.ts:181 scripts/md/extensions/alert.ts:186 scripts/md/extensions/alert.ts:191 scripts/md/extensions/alert.ts:196 scripts/md/extensions/alert.ts:201 scripts/md/extensions/alert.ts:206 scripts/md/extensions/alert.ts:211 scripts/md/extensions/alert.ts:216 scripts/md/extensions/alert.ts:221 scripts/md/extensions/alert.ts:226 scripts/md/extensions/alert.ts:231 scripts/md/extensions/alert.ts:236 scripts/md/extensions/alert.ts:241 scripts/md/extensions/alert.ts:251 scripts/md/extensions/alert.ts:256 scripts/md/extensions/katex.ts:26 scripts/md/extensions/plantuml.ts:193 scripts/md/extensions/plantuml.ts:7 scripts/md/extensions/plantuml.ts:35 scripts/md/extensions/plantuml.ts:61 scripts/md/extensions/plantuml.ts:78 scripts/md/extensions/plantuml.ts:241 scripts/md/extensions/ruby.ts:5 scripts/md/LICENSE:3 scripts/md/utils/languages.ts:80

🔑 Env variables (4)

scripts/md/render.ts:36 scripts/md/render.ts:39 scripts/md/render.ts:36 scripts/md/render.ts:39

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Security Assessment

Copy report link

https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/jimliu-baoyu-markdown-to-html/security.svg)](https://skillstore.io/skills/jimliu-baoyu-markdown-to-html?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/jimliu-baoyu-markdown-to-html?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-markdown-to-html/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-markdown-to-html.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

jimliu. (2026). baoyu-markdown-to-html security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4

BibTeX citation

@techreport{jimliu-jimliu-baoyu-markdown-to-html-2026,
  author = {jimliu},
  title = {baoyu-markdown-to-html security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-markdown-to-html security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "jimliu"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/jimliu-baoyu-markdown-to-html/audits/4"
identifiers:
  - type: other
    value: "skillstore:jimliu-baoyu-markdown-to-html:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

45

Architecture

85

Maintainability

85

Content

70

Community

83

Spec Compliance

What You Can Build

Prepare WeChat Articles

Convert a finished Markdown article into styled HTML suitable for pasting into a publishing workflow.

Publish Technical Guides

Render code blocks, diagrams, alerts, and math in a consistent HTML style for developer education.

Format Documentation Drafts

Turn Markdown drafts with frontmatter and images into reviewed HTML deliverables.

Try These Prompts

Convert One File

Convert article.md to styled HTML with the default theme. Report the output path and any backup path.

Use a Theme

Convert draft.md with the grace theme. Keep the first heading in the rendered content.

Prepare a Publishing Draft

Convert post.md to HTML, use the title from frontmatter, and list any image mappings I must review.

Render a Technical Article

Convert guide.md with diagrams, math, alerts, and code blocks. Use the simple theme and preserve existing output backups.

Best Practices

Review Markdown from untrusted sources before conversion.
Use local images when network access is not required.
Choose the theme before conversion to avoid repeated output changes.

Avoid

Do not convert secret or private Markdown on shared machines without reviewing temporary files.
Do not paste generated HTML from untrusted Markdown into privileged web pages.
Do not rely on remote diagrams or images for offline publishing.

Frequently Asked Questions

What does this skill produce?

It produces a styled HTML file from a Markdown input file.

Which tools can use it?

The report lists Claude, Codex, and Claude Code as supported tools.

Which themes are included?

The skill documents default, grace, and simple themes.

Does it support diagrams?

Yes. It includes support for Mermaid and PlantUML diagram blocks.

Where is the HTML saved?

The HTML file is saved in the same directory as the Markdown input.

Is it safe for untrusted Markdown?

No. Extra sanitization is needed before using output from untrusted Markdown.

Developer Details

Author

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/jimliu/baoyu-skills/tree/main/skills/baoyu-markdown-to-html/

Ref

a25199bc7d6b82598536822d1738eb5d5f54025b

Maintenance freshness

7/18/2026

Usage

14 downloads · 221 views

File structure

📁 md/

📁 extensions/

📄 footnotes.ts

📄 infographic.ts

📄 plantuml.ts

📄 default.css

📄 simple.css

📄 languages.ts

📄 package.json

More from jimliu

baoyu-comic

Create Educational Knowledge Comics

Educational topics can be difficult to explain with plain text and generic visuals. This skill turns source material into structured comic plans, image prompts, and export-ready pages.

Design & Creative View

baoyu-format-markdown

Format Markdown for Clearer Reading

Turn plain text or uneven Markdown into a structured document that readers can scan quickly. Preserve the author's content while improving headings, emphasis, lists, frontmatter, and typography.

Documentation View

baoyu-article-illustrator

Illustrate Articles with Consistent Visuals

Article authors often know their message but lack a clear visual plan. This skill finds useful illustration points and prepares consistent raster image generation prompts.

Design & Creative View

baoyu-cover-image

Generate Polished Article Cover Images

Article creators need consistent cover visuals without manually designing every composition. This skill guides image prompts across style, color, layout, text, mood, and aspect ratio choices.

Design & Creative View

release-skills

Release Baoyu Skills Safely

Manual releases can miss changelog, version, and tag steps. This skill guides a repeatable release workflow for baoyu-skills with bilingual changelogs and local git tagging.

DevOps & Infrastructure View

baoyu-infographic

Create Infographics from Structured Content

Turning notes or reports into a clear visual can take many design decisions. This skill analyzes content, recommends layouts and styles, and prepares an image prompt for Claude, Codex, or Claude Code workflows.

Design & Creative View

mermaid-diagrams

Create Mermaid Diagrams for Software Documentation

by softaworks

Teams often need clear diagrams that stay close to code and documentation. This skill guides Claude, Codex, and Claude Code through Mermaid syntax for maintainable visual models.

Documentation View

markdown-pro

Create Professional Markdown Documentation

by AutumnsGrove

Inconsistent project documentation makes installation, use, and contribution difficult. This skill supplies structured templates, formatting guidance, and local tools for maintainable Markdown.

Documentation View

c4-architecture

Create C4 Architecture Diagrams

by softaworks

Architecture documentation often becomes unclear or too detailed for its audience. This skill creates focused C4 Mermaid diagrams for system context, containers, components, deployments, and flows.

Documentation View

docs-write

Write Clear Metabase Documentation

by metabase

Technical documentation often becomes formal, vague, or difficult to scan. This skill helps Claude, Codex, and Claude Code write clear Metabase documentation with focused steps.

Documentation View

mermaid-expert

Create Clear Mermaid Diagrams

by sickn33

Complex systems and processes are difficult to explain with text alone. This skill selects suitable Mermaid formats and produces readable, styled diagram guidance.

Documentation View

code-documentation-code-explain

Explain Complex Code Clearly

by sickn33

Complex code is hard to teach, review, and onboard. This skill turns code into clear walkthroughs, diagrams, examples, and learning paths.

Documentation View