← 返回 Skills 市场
jpengcheng523-netizen

File Downloader

作者 jpengcheng523-netizen · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
163
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install downloader
功能描述
Download a file from a URL and save it locally.
使用说明 (SKILL.md)

downloader

Download a file from a given URL and save it to a specified local path. Supports any file type accessible via HTTP/HTTPS.

When to Use

USE this skill when:

  • When the user wants to download a file from a URL to the local machine.
  • When the user needs to save a remote resource (image, audio, video, document, etc.) locally.
  • When the user provides a download link and wants to store the file at a specific path.

When NOT to Use

DON'T use this skill when:

  • When the user only wants to view or read a URL content without saving to disk.

Parameters

Parameter Type Required Description
url string Yes The URL of the file to download
save_path string No Local path to save the file (defaults to current directory with original filename)

Commands

Basic Call

python3 scripts/download.py --url 'https://example.com/file.png'

Save to a specific path

python3 scripts/download.py --url 'https://example.com/file.png' --save_path './downloads/image.png'

Examples

"Help me download this image."

python3 scripts/download.py --url 'https://example.com/photo.jpg'

"Download this PDF and save it to the reports folder."

python3 scripts/download.py --url 'https://example.com/report.pdf' --save_path './reports/report.pdf'

Response

Script outputs JSON to stdout:

  • code = 0 — success, data contains the local file path where the file was saved
  • code != 0 — error, show message to the user and suggest retrying
{
  "code": 0,
  "message": "success",
  "data": "./downloads/file.png"
}

Notes

  • Requires requests package: pip install requests
安全使用建议
This skill appears coherent with its purpose, but be aware of normal risks when running a downloader: - It will fetch any URL you provide and write to whatever save_path you pass; a malicious or mistaken path can overwrite important files. Avoid running as root and avoid giving absolute paths unless you trust them. - The script will attempt to reach arbitrary network locations; an attacker could use it to probe internal services (SSRF). Run in a network-restricted or sandboxed environment if that is a concern. - Large downloads can consume disk and time; there is no size limit or content-type validation. - Scan downloaded files before opening and restrict allowed URL hosts/paths if possible. - Ensure the Python 'requests' dependency is installed in a controlled environment (pip install requests). If you need stricter safety, request a version that enforces allowed hostnames, enforces destination directory whitelists, and validates or limits download size.
功能分析
Type: OpenClaw Skill Name: downloader Version: 1.0.0 The skill provides a utility to download files from a URL to a local path. However, the `scripts/download.py` script lacks input validation or sanitization on the `save_path` parameter, which introduces a path traversal vulnerability. This could allow an agent to overwrite sensitive system files if provided with a malicious path. While the code aligns with the stated purpose in `SKILL.md`, the lack of path restrictions is a significant security flaw.
能力评估
Purpose & Capability
Name/description match the provided script and SKILL.md. The included Python script implements exactly the advertised behavior (HTTP/HTTPS download and save). No unrelated binaries, services, or credentials are requested.
Instruction Scope
Instructions are limited to running the included script with --url and optional --save_path. They permit downloading arbitrary URLs and writing to any filesystem path the caller provides; this is expected for a downloader but grants broad discretion to write files and access network resources. There is no input validation or sandboxing described.
Install Mechanism
Instruction-only skill with a small Python script; no install spec and no remote downloads of code. The only dependency is the well-known 'requests' package (not installed automatically by the skill).
Credentials
No environment variables, credentials, or config paths are requested. The skill does not attempt to access secrets or unrelated services.
Persistence & Privilege
always is false and the skill does not request persistent system-level presence or modify other skills. It runs only when invoked.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install downloader
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /downloader 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial publish - Download files from URL
元数据
Slug downloader
版本 1.0.0
许可证 MIT-0
累计安装 3
当前安装数 3
历史版本数 1
常见问题

File Downloader 是什么?

Download a file from a URL and save it locally. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 163 次。

如何安装 File Downloader?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install downloader」即可一键安装,无需额外配置。

File Downloader 是免费的吗?

是的,File Downloader 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

File Downloader 支持哪些平台?

File Downloader 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 File Downloader?

由 jpengcheng523-netizen(@jpengcheng523-netizen)开发并维护,当前版本 v1.0.0。

💬 留言讨论