web-to-obsidian

抓取网页文章并保存到 Obsidian vault。当用户想要保存网页文章、博客、文档到 Obsidian 时使用，特别是提到"保存到 Obsidian"、"存到 Obsidian"、"抓取网页"、"网页转 Obsidian"、"导入文章"等场景。支持自动翻译非中文内容为中文，生成元数据（标签、摘要、标题），并以...

Before installing or using this skill, consider the following: - Network & privacy: The fetch scripts forward the target URL to third‑party cleaning services (r.jina.ai, markdown.new, defuddle.md) and will also fetch the original URL locally if those services fail. That means the content and the URL (potentially including internal-only addresses like 169.254.169.254 or localhost) could be seen by external services or fetched from your agent. Do NOT run this on sensitive/internal URLs. - SSL verification: The code disables SSL verification for outgoing requests. This increases the risk of man‑in‑the‑middle interception. Consider enabling proper SSL checking before using in production. - Missing declared dependencies: The SKILL.md expects python3 and obsidian-cli, but the skill metadata does not declare required binaries or an install step. Ensure you have python3 and a safe method to import into Obsidian (verify what obsidian-cli does) before running. - Hardening suggestions: (1) Add domain whitelisting or block private IP ranges to prevent SSRF to internal resources. (2) Re-enable SSL verification or limit it to specific known hosts. (3) Consider running the fetch step in an isolated environment or on a machine that contains no sensitive credentials. (4) If you don't trust external cleaning services, replace them with a local converter or a vetted service. - If you want to proceed: audit scripts/fetch.py and scripts/smart-url.py locally, test with non-sensitive public URLs, and confirm obsidian-cli behavior (especially how it receives content) before using with real notes or private sites.

Type: OpenClaw Skill Name: web-to-obsidian Version: 1.0.0 The skill contains security vulnerabilities, specifically the intentional disabling of SSL certificate verification (ssl.CERT_NONE) in both scripts/fetch.py and scripts/smart-url.py, which exposes the agent to man-in-the-middle attacks. While the core functionality of sending URLs to third-party services like r.jina.ai and markdown.new is aligned with the stated purpose of web scraping, the lack of transport security and the execution of shell commands for file management (temp.md) and external CLI interactions (obsidian-cli) present a high-risk profile for an automated agent.