Mirror Website

镜像网站到本地的完整工作流。当用户说镜像网站、下载网站、抓取网站、本地化网站，或者提供一个网址和保存路径时，必须使用此 skill。输入格式为：镜像网站 www.example.com 保存地址 /a/b/c。自动处理代理、递归下载、文件名清理等全流程。即使用户只是提到想把某个网站保存到本地、离线浏览、克隆站点，...

This skill appears to do what it says (mirror websites) but exercise caution before installing or running it: - Verify the agent environment has the required CLI tools (wget, curl, grep, sed, find, mv/rename, bash, and a Python or other static web server for preview). The SKILL.md relies on these but the skill metadata does not declare them. - The skill explicitly disables robots.txt and skips SSL certificate checks (--no-check-certificate, -e robots=off). That can be legally or ethically problematic and may expose you to unsafe content; only proceed if you understand and accept the implications for the target site. - The instructions create and execute shell scripts in the chosen save path. Review any generated scripts (fetch-query-assets.sh, fix-filenames.sh, etc.) before executing to ensure they do only what you expect and are not pointed at sensitive system paths. - The skill may set http(s)_proxy to a local proxy at 127.0.0.1:7890 if direct access fails. Ensure you trust any local proxy and understand that traffic may be routed through it. - Avoid saving mirrors to sensitive directories (e.g., system paths, home root) and prefer running in a disposable or restricted environment. Consider running the workflow in a sandbox or VM if you are unsure. If you want to proceed, ask the skill to report the exact commands and to show the full contents of any scripts it will write before it executes them; do not allow blind execution of created files.

Type: OpenClaw Skill Name: mirror-website Version: 1.0.0 The skill performs high-risk operations including generating and executing shell scripts (fetch-query-assets.sh and fix-filenames.sh) and opening a local network port via a background Python HTTP server. While these actions align with the stated goal of mirroring and previewing websites, the automated execution of agent-created scripts and the hardcoded attempt to use a local proxy (127.0.0.1:7890) represent a significant security risk and potential for unintended side effects on the host system.