web page to pdf
v1.0.0Convert web pages to PDF files using Playwright, saving them in A4 format with margins after fully loading the page.
⭐ 0· 123·0 current·0 all-time
byJay@goog
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, and the included script all align: the script uses Playwright/Chromium to load a URL and save an A4 PDF with margins. No unrelated binaries, environment variables, or capabilities are requested.
Instruction Scope
Instructions and script stay on-purpose (invoke python pdf2.py <url>). The script navigates to the provided URL and writes a PDF to the current working directory. Important caveats: the browser executes page JS and fetches resources from the network, so rendering arbitrary/untrusted URLs can cause outbound network activity (and may reach internal network endpoints), and the page content may trigger large downloads or heavy CPU usage. The SKILL.md does not instruct any unrelated file reads, env access, or external posting.
Install Mechanism
No automatic install spec is included (instruction-only). SKILL.md suggests running 'pip install playwright' and 'playwright install chromium' if needed — this is a standard, explicit manual setup step and not an automated download-from-arbitrary-URL install. Note: installing Playwright downloads browser binaries which are large but expected for this capability.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The script does not read secrets or external environment state. This is proportionate to its stated function.
Persistence & Privilege
Skill is not always-enabled and allows normal model invocation. It does not modify other skills or system-wide agent settings and does not request persistent privileges.
Assessment
This skill appears to do exactly what it claims: open a URL in a Playwright-driven Chromium instance and save a PDF. Before using it, consider: 1) Only convert trusted or internal-allowed URLs — the browser will execute page JavaScript and make network requests which could contact external or internal services (SSRF risk). 2) Run the tool in a sandboxed environment or an isolated container if you plan to convert untrusted sites. 3) Be aware that installing Playwright will download browser binaries (large) and that PDF output is written to the current working directory. 4) If you need stricter controls, validate/whitelist URLs, limit network access for the process, or run it on a separate VM. The code itself contains no hidden endpoints or credential exfiltration logic.Like a lobster shell, security has layers — review code before you run it.
latestvk97a963kyg1p74pc7qyhqh5rhs834c62
License
MIT-0
Free to use, modify, and redistribute. No attribution required.