URL to PDF

v0.0.2

Convert URL to PDF suitable for mobile reading.

0· 1.2k·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description match the bundled Python script which uses Playwright to load a webpage and print a PDF sized for an iPhone. The declared required binary 'uv' fits the script's shebang/comments that rely on uv to install/run dependencies.
!
Instruction Scope
SKILL.md tells the agent to run the script and send the generated PDF. The script reads an environment variable PDF_OUT_DIR (OUT_DIR) to choose where to write the PDF, but that env var is not declared in the skill requirements or documented in SKILL.md. The script writes files under the chosen path (default ~/Documents). The skill will also navigate to arbitrary URLs provided as input — expected for the feature but worth noting as it grants the skill network access and the ability to fetch arbitrary remote content.
Install Mechanism
No explicit install spec in registry; the skill is instruction-only but includes a Python script that relies on uv to install Playwright and python-slugify. Playwright will install browser binaries (chromium) via uvx, which is a large download but expected for this capability. No obscure URLs or third-party installers are present in the manifest or code.
!
Credentials
The skill does not declare any required environment variables but the script uses PDF_OUT_DIR to choose output location. That env var can redirect output to arbitrary filesystem locations. No API keys or unrelated credentials are requested, which is good, but the undocumented env var and default write to ~/Documents increase risk if misconfigured or if the agent runs with elevated filesystem access.
!
Persistence & Privilege
The skill is marked always: true which forces it to be included in every agent run. Combined with its ability to fetch arbitrary URLs, write files to user-controlled locations, and run a browser engine, this persistent inclusion increases blast radius and should be justified. The skill does not modify other skills or system configs, but always:true is a notable privilege.
What to consider before installing
This skill appears to do what it says (convert a webpage to a mobile-formatted PDF), but consider these points before installing: - always:true: The skill is force-included in every agent run. If you don't want it available automatically, avoid installing or request the owner remove always:true. - Filesystem writes: By default it writes PDFs to ~/Documents and respects an environment variable PDF_OUT_DIR (not documented in the registry). Ensure the runtime environment does not set PDF_OUT_DIR to a sensitive location and that the agent runs with least privilege. - Network access: The skill opens arbitrary URLs you provide. That is required for its function but also means the skill can fetch remote content; do not let it fetch URLs you don't trust. - Install size/side effects: Running it will pull Playwright and browser binaries (chromium) via uv/uvx — expect a large download and additional runtime components. - Trust and sandboxing: Only install if you trust the author or run the skill in a sandboxed environment. If you need stricter controls, ask the maintainer to remove always:true, document PDF_OUT_DIR, and limit where files can be written. If you want to proceed: run the script in an isolated environment (container or VM), set PDF_OUT_DIR to a safe directory you control, and review the provided Python source (url2pdf.py) yourself. If you are unsure, do not enable always:true and require on-demand invocation instead.

Like a lobster shell, security has layers — review code before you run it.

iphonevk9702ar85azy76xndyaxgbf40d80x1gclatestvk9702ar85azy76xndyaxgbf40d80x1gcmobilevk9702ar85azy76xndyaxgbf40d80x1gcpdfvk9702ar85azy76xndyaxgbf40d80x1gcreadingvk9702ar85azy76xndyaxgbf40d80x1gcurl-to-pdfvk9702ar85azy76xndyaxgbf40d80x1gcurl2pdfvk9702ar85azy76xndyaxgbf40d80x1gc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🦞 Clawdis
OSmacOS · Linux · Windows
Binsuv

Comments