← Back to Skills Marketplace
jpengcheng523-netizen

File Downloader

by jpengcheng523-netizen · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
163
Downloads
0
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install downloader
Description
Download a file from a URL and save it locally.
README (SKILL.md)

downloader

Download a file from a given URL and save it to a specified local path. Supports any file type accessible via HTTP/HTTPS.

When to Use

USE this skill when:

  • When the user wants to download a file from a URL to the local machine.
  • When the user needs to save a remote resource (image, audio, video, document, etc.) locally.
  • When the user provides a download link and wants to store the file at a specific path.

When NOT to Use

DON'T use this skill when:

  • When the user only wants to view or read a URL content without saving to disk.

Parameters

Parameter Type Required Description
url string Yes The URL of the file to download
save_path string No Local path to save the file (defaults to current directory with original filename)

Commands

Basic Call

python3 scripts/download.py --url 'https://example.com/file.png'

Save to a specific path

python3 scripts/download.py --url 'https://example.com/file.png' --save_path './downloads/image.png'

Examples

"Help me download this image."

python3 scripts/download.py --url 'https://example.com/photo.jpg'

"Download this PDF and save it to the reports folder."

python3 scripts/download.py --url 'https://example.com/report.pdf' --save_path './reports/report.pdf'

Response

Script outputs JSON to stdout:

  • code = 0 — success, data contains the local file path where the file was saved
  • code != 0 — error, show message to the user and suggest retrying
{
  "code": 0,
  "message": "success",
  "data": "./downloads/file.png"
}

Notes

  • Requires requests package: pip install requests
Usage Guidance
This skill appears coherent with its purpose, but be aware of normal risks when running a downloader: - It will fetch any URL you provide and write to whatever save_path you pass; a malicious or mistaken path can overwrite important files. Avoid running as root and avoid giving absolute paths unless you trust them. - The script will attempt to reach arbitrary network locations; an attacker could use it to probe internal services (SSRF). Run in a network-restricted or sandboxed environment if that is a concern. - Large downloads can consume disk and time; there is no size limit or content-type validation. - Scan downloaded files before opening and restrict allowed URL hosts/paths if possible. - Ensure the Python 'requests' dependency is installed in a controlled environment (pip install requests). If you need stricter safety, request a version that enforces allowed hostnames, enforces destination directory whitelists, and validates or limits download size.
Capability Analysis
Type: OpenClaw Skill Name: downloader Version: 1.0.0 The skill provides a utility to download files from a URL to a local path. However, the `scripts/download.py` script lacks input validation or sanitization on the `save_path` parameter, which introduces a path traversal vulnerability. This could allow an agent to overwrite sensitive system files if provided with a malicious path. While the code aligns with the stated purpose in `SKILL.md`, the lack of path restrictions is a significant security flaw.
Capability Assessment
Purpose & Capability
Name/description match the provided script and SKILL.md. The included Python script implements exactly the advertised behavior (HTTP/HTTPS download and save). No unrelated binaries, services, or credentials are requested.
Instruction Scope
Instructions are limited to running the included script with --url and optional --save_path. They permit downloading arbitrary URLs and writing to any filesystem path the caller provides; this is expected for a downloader but grants broad discretion to write files and access network resources. There is no input validation or sandboxing described.
Install Mechanism
Instruction-only skill with a small Python script; no install spec and no remote downloads of code. The only dependency is the well-known 'requests' package (not installed automatically by the skill).
Credentials
No environment variables, credentials, or config paths are requested. The skill does not attempt to access secrets or unrelated services.
Persistence & Privilege
always is false and the skill does not request persistent system-level presence or modify other skills. It runs only when invoked.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install downloader
  3. After installation, invoke the skill by name or use /downloader
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial publish - Download files from URL
Metadata
Slug downloader
Version 1.0.0
License MIT-0
All-time Installs 3
Active Installs 3
Total Versions 1
Frequently Asked Questions

What is File Downloader?

Download a file from a URL and save it locally. It is an AI Agent Skill for Claude Code / OpenClaw, with 163 downloads so far.

How do I install File Downloader?

Run "/install downloader" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is File Downloader free?

Yes, File Downloader is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does File Downloader support?

File Downloader is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created File Downloader?

It is built and maintained by jpengcheng523-netizen (@jpengcheng523-netizen); the current version is v1.0.0.

💬 Comments