← 返回 Skills 市场

Markdown.new Skill

Name: Markdown.new Skill
Author: joelchance

作者 joelchance · GitHub ↗ · v1.0.0

cross-platform ✓ 安全检测通过

19021

总下载

当前安装

版本数

在 OpenClaw 中安装

/install markdown-convert

功能描述

Convert public web pages into clean Markdown with markdown.new for AI workflows. Use when tasks require URL-to-Markdown conversion for summarization, RAG ing...

使用说明 (SKILL.md)

Markdown.new

Use this skill to convert public URLs into LLM-ready Markdown via markdown.new.

Path Resolution (Critical)

Resolve relative paths like scripts/... and references/... from the skill directory, not workspace root.
If current directory is unknown, use an absolute script path.

python3 ~/.codex/skills/markdown-new/scripts/markdown_new_fetch.py 'https://example.com'

cd ~/.codex/skills/markdown-new
python3 scripts/markdown_new_fetch.py 'https://example.com'

Avoid this pattern from an arbitrary workspace root:

python3 scripts/markdown_new_fetch.py 'https://example.com'

Workflow

Validate the input URL is public http or https.
Run scripts/markdown_new_fetch.py with --method auto first.
Re-run with --method browser if output misses JS-rendered content.
Enable --retain-images only when image links are required.
Capture response metadata (x-markdown-tokens, x-rate-limit-remaining, and JSON metadata when present) for downstream planning.

Quick Start

Commands below assume current directory is the skill root (~/.codex/skills/markdown-new).

python3 scripts/markdown_new_fetch.py 'https://example.com' > page.md

python3 scripts/markdown_new_fetch.py 'https://example.com' --method browser --retain-images --output page.md

python3 scripts/markdown_new_fetch.py 'https://example.com' --deliver-md

Method Selection

auto: default. Let markdown.new use its fastest successful pipeline.
ai: force Workers AI HTML-to-Markdown conversion.
browser: force headless browser rendering for JS-heavy pages.

Use auto first, then retry with browser only when needed.

Delivery Mode

Use --deliver-md to force file output in .md format.
In delivery mode, content is wrapped as:
- \x3Curl>
- ...markdown...
- \x3C/url>
If --output is omitted, the script auto-generates a filename from the URL.

API Modes

Prefix mode:
- https://markdown.new/https://example.com?method=browser&retain_images=true
POST mode:
- POST https://markdown.new/
- JSON body: {"url":"https://example.com","method":"auto","retain_images":false}

Prefer POST mode for automation and explicit parameters.

Limits And Safety

Treat 429 as rate limiting (documented limit: 500 requests/day/IP).
Convert only publicly accessible pages.
Respect robots.txt, terms of service, and copyright constraints.
Do not treat markdown.new output as guaranteed complete for every page; verify critical extractions.

References

references/markdown-new-api.md

安全使用建议

Install only if you are comfortable sending target URLs and fetched page content to markdown.new. Use it for public, non-sensitive pages, avoid URLs with secrets or private query parameters, do not override --api-url unless you trust the endpoint, and choose output filenames that will not overwrite important files.

功能分析

Type: OpenClaw Skill Name: markdown-convert Version: 1.0.0 The `scripts/markdown_new_fetch.py` script contains two significant vulnerabilities. The `--api-url` argument allows the agent to send the target URL's content to an arbitrary endpoint, posing an SSRF/data exfiltration risk if an attacker can control this parameter via prompt injection. Additionally, the `--output` argument allows writing the converted markdown to an arbitrary file path, which could lead to arbitrary file writes if an attacker can manipulate the agent's input. While these are critical vulnerabilities, there is no clear evidence of intentional malicious design (e.g., hardcoded malicious domains, exfiltration of local secrets, or persistence mechanisms); the script's core function is legitimate. Therefore, it is classified as suspicious due to these exploitable capabilities.

能力评估

✓ Purpose & Capability

The network request to markdown.new and optional local Markdown output directly match the stated purpose of converting public web pages for AI workflows.

ℹ Instruction Scope

The artifacts disclose markdown.new use and say to convert only public HTTP/HTTPS URLs, but they should more plainly warn that submitted URLs and page content are sent to a third party.

ℹ Install Mechanism

No hidden installer or automatic execution is present; the README includes manual copy commands that remove an existing skill directory before reinstalling, which is common but should be run deliberately.

ℹ Credentials

Network access and writing output files are proportionate for the conversion workflow, provided users avoid private URLs, secrets in query strings, and careless output paths.

✓ Persistence & Privilege

The skill does not request elevated privileges, create background persistence, read credentials, or modify unrelated system state; file writes occur only through explicit output options or shell redirection.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install markdown-convert
安装完成后，直接呼叫该 Skill 的名称或使用 /markdown-convert 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Version 1.0.0 — Initial Release - Introduced the "markdown-new" skill for converting public web pages into clean, portable Markdown using markdown.new. - Added clear workflow and documentation for command-line usage, including method selection (auto/ai/browser) and image retention options. - Included handling for relative path resolution, rate limits, and conversion failures. - Provided detailed guidance for API usage, delivery mode, and critical safety considerations. - Added supporting files: README.md, agents/openai.yaml, references/markdown-new-api.md, scripts/markdown_new_fetch.py.

元数据

Slug markdown-convert

版本 1.0.0

许可证 —

累计安装 37

当前安装数 32

历史版本数 1

常见问题