Webpage Export

Export webpages into clean local TXT, DOCX, and PDF files with source metadata, fallback extraction logic, and browser-assisted recovery for difficult pages....

This skill appears to do what it claims, but take these precautions before installing/using it: 1) Ensure you have python3, curl, node, the Node 'playwright' package, and Chrome/Chromium (and textutil on macOS) installed — the registry metadata does not list these, so failure modes are likely if they are missing. 2) Run the tool in a controlled workspace (explicit --outdir) and avoid running it against untrusted internal URLs: the headless browser will execute page JavaScript which can trigger network calls or other side effects originating from the target page. 3) Because the skill owner is unknown, review and test on safe pages first. 4) If you need an automated install of dependencies, add or request an install spec from the publisher before wider deployment.

Type: OpenClaw Skill Name: webpage-export Version: 1.0.1 The skill bundle provides a tool for exporting webpages using curl, headless Chrome, and Node.js/Playwright. While the logic is aligned with the stated purpose, the script `scripts/export_webpage.py` lacks URL scheme validation, allowing for potential Local File Inclusion (LFI) via 'file://' URLs. It also permits writing files to arbitrary locations through the '--outdir' parameter and executes an embedded Node.js script, which increases the attack surface for an AI agent if it is manipulated into accessing sensitive local resources.