← 返回 Skills 市场
sipingme

News To Markdown

作者 PING SI · GitHub ↗ · v3.1.7 · MIT-0
cross-platform ✓ 安全检测通过
632
总下载
1
收藏
1
当前安装
57
版本数
在 OpenClaw 中安装
/install news-to-markdown-skill
功能描述
输入文章 URL,输出干净的 Markdown 正文。支持17个平台专项优化(头条、微信公众号、知乎、36kr、虎嗅、华尔街见闻、澎湃、InfoQ 等),双引擎提取、图片本地化、三层抓取策略。常与 browser-web-search skill 配合:先用 bws 搜索拿到 url 列表,再逐篇调用本 skil...
安全使用建议
This skill appears to do what it says: convert web articles to Markdown. Before installing or enabling it: 1) Install the pinned npm package manually (npm install -g [email protected]) and inspect its source (the repo and src file are linked in SKILL.md/config). 2) Run the launcher in a sandbox/container if you want to limit risk from supply‑chain changes or runtime browser downloads. 3) Be aware that enabling image download will write files to disk and that Playwright (if used) may download Chromium binaries from external CDNs. 4) Avoid passing sensitive URLs or credentials to the tool (it needs only article URLs). If you need higher assurance, review the package code and any transitive dependencies before using it in production.
功能分析
Type: OpenClaw Skill Name: news-to-markdown-skill Version: 3.1.7 The skill is a news-to-markdown converter that demonstrates high security awareness. The launcher script (scripts/run.js) implements robust input validation, including length limits, control-character filtering, and a strict allow-list for subcommands and flags. It avoids dangerous sinks like child_process.exec by loading the core logic in-process via require(). The documentation (SKILL.md and README.md) explicitly warns users about supply chain risks and provides a hardened execution path to prevent version drift and shell injection.
能力评估
Purpose & Capability
Skill is a web-article extractor and the artifacts (node/npm requirement, a launcher that requires the pinned 'news-to-markdown' package, network access to news domains, and filesystem writes for markdown/images) match that purpose. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md and the launcher limit forwarded args and require a pinned CLI module in-process; instructions focus on fetching pages, extracting content, and optionally downloading images. The package may fall back to Playwright (browser automation) for dynamic pages — this implies downloading Chromium and running a headless browser, and the tool will read/write article and image files. The instructions do not ask to collect unrelated system data or secrets.
Install Mechanism
Installation uses the public npm registry with a pinned exact version ([email protected]), which is the expected distribution path. This is a common but nontrivial supply‑chain risk (author calls this out in SKILL.md). There are no opaque download URLs in the skill itself, but optional Playwright usage can trigger large binary downloads from Playwright's CDN at runtime.
Credentials
The skill declares no required environment variables or credentials. File/network access required (reading/writing Markdown and images, fetching article domains) is proportional to its purpose.
Persistence & Privilege
Skill is user-invocable, not 'always: true', does not auto-install or auto-update packages, and does not modify other skills' configurations. It loads a globally-installed npm package at runtime but does not request elevated platform privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install news-to-markdown-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /news-to-markdown-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.1.7
**Switch to safer, fixed-version install path (no runtime npx) with in-process invocation via launcher.** - Changed install method from dynamic `npx` invocation to global `npm install -g [email protected]` with process-internal require. - All usage/docs now recommend `node scripts/run.js convert ...` instead of direct `npx` calls. - Eliminated runtime version drift and sub-process risk; CLI args are allow-listed and strictly validated. - npx-based usage remains as backup, but is discouraged for regular or batch use. - Updated risk and security notices to reflect the new install and invocation approach.
v3.1.6
news-to-markdown-skill 3.3.1 - 新增:文章无封面图时,自动基于标题生成抽象图作为 default cover (写入 frontmatter cover: 字段),避免下游发布失败 - 安全提升:Skill 插件调用路径(scripts/run.js)将仅允许 SKILL.md 文档化的参数,所有入参均做长度和控制字符校验,不再支持任意 shell 注入 - 安装说明更新:明确 process 内 require 已锁定 npm 包,需手动预安装;未安装时报结构化错误并退出,不再自动回退 npx 或子进程方式 - 安全策略符合最新 codeguard-0-supply-chain-security 和 input-validation-injection 标准
v3.1.5
**news-to-markdown-skill 3.3.0 – 更强的网站适配与文档精简** - 平台专项优化扩展至 17 个主流新闻和内容平台,包括知乎、虎嗅、华尔街见闻、澎湃、InfoQ、小红书等(原本为 13 平台)。 - 同步主核心库 news-to-markdown 至 3.3.0,命令行/参数说明也已更新。 - 文档重写:更精简易用的快速上手、常见 SOP、AI Agent 工作流举例,更适合配合 browser-web-search 用于批量文章采集。 - 删除不必要脚本文件,去除 scripts/postinstall.js。 - 明确图片本地化场景、参数,强调防图片失效的必要性。 - 大幅精简和聚焦 SKILL.md 内容,便于开发者和 AI Agent 快速集成和调用。
v3.1.4
- Updated core dependency version to news-to-markdown@^3.1.3 and related references in documentation, config, and scripts. - Revised usage examples, documentation, and command parameters to reflect the new version. - No functional interface changes; maintenance and doc alignment only.
v3.1.3
- 更新依赖版本至 news-to-markdown@^3.1.3,支持新版本 CLI - SKILL.md 内引用及示例的版本号同步为 3.1.3 - 无功能及用法变更,仅为依赖和文档版本升级
v3.1.2
升级到 3.1.2,配套 news-to-markdown ^3.1.2
v3.1.1
收紧权限配置,提升安全性;配套 news-to-markdown ^3.1.0
v3.0.0
升级到 3.0.0,配套 news-to-markdown ^3.0.0
v2.3.31
改用 npx 动态执行,统一脚本命名为 run.js;添加 postinstall.js 帮助信息脚本;同步 news-to-markdown ^1.4.29
v2.3.29
同步 news-to-markdown ^1.4.28,版本更新至 2.3.29
v2.3.28
bump news-to-markdown to ^1.4.27
v2.3.27
版本同步
v2.3.26
版本升至2.3.26,同步 news-to-markdown 1.4.25,修复头条移动端图片提取
v2.3.25
版本升至2.3.25,同步 news-to-markdown ^1.4.24
v2.3.22
- Updated documentation in SKILL.md (version and related content adjustments). - Updated metadata and dependency versioning in package.json and _meta.json. - No feature or behavior changes; this release focuses on documentation and metadata fixes.
v2.3.21
### news-to-markdown-skill v2.3.21 - 更新 SKILL.md 和 _meta.json 文件中的版本号为 2.3.21 - 无功能改动,仅为文档与元数据维护同步
v2.3.20
news-to-markdown-skill v2.3.20 - Updated documentation and internal files to reflect version 2.3.19. - Minor corrections in SKILL.md and related metadata. - No feature or functional changes in this release.
v2.3.19
news-to-markdown-skill v2.3.19 - 修正了版本号声明不一致的问题,确保 package.json、_meta.json 及文档中的版本号统一。 - 技能文档 SKILL.md、依赖声明文件、元数据文件均已同步至最新版本号。 - 依赖要求中详细标注可选系统依赖,并完善了文档注释说明。
v2.3.18
news-to-markdown-skill v2.3.18 - Updated dependency: Raised minimum version to news-to-markdown@^1.4.18 in package.json. - No feature or interface changes; version bump for dependency alignment.
v1.4.18
news-to-markdown-skill v1.4.18 - Updated the SKILL.md file only. - No functional or code changes; documentation and metadata were refreshed.
元数据
Slug news-to-markdown-skill
版本 3.1.7
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 57
常见问题

News To Markdown 是什么?

输入文章 URL,输出干净的 Markdown 正文。支持17个平台专项优化(头条、微信公众号、知乎、36kr、虎嗅、华尔街见闻、澎湃、InfoQ 等),双引擎提取、图片本地化、三层抓取策略。常与 browser-web-search skill 配合:先用 bws 搜索拿到 url 列表,再逐篇调用本 skil... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 632 次。

如何安装 News To Markdown?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install news-to-markdown-skill」即可一键安装,无需额外配置。

News To Markdown 是免费的吗?

是的,News To Markdown 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

News To Markdown 支持哪些平台?

News To Markdown 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 News To Markdown?

由 PING SI(@sipingme)开发并维护,当前版本 v3.1.7。

💬 留言讨论