ClawHub

Distil the web & PDFs into markdown

v2.0.1

Fetch web pages as clean Markdown and search the web via the distil.net proxy

⭐ 0· 849·4 current·4 all-time
byMikel Lindsaar@mikel
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the required resources and instructions. Requiring curl and DISTIL_API_KEY is proportional to a skill that calls the Distil proxy; no unrelated binaries or credentials are requested.
ℹ
Instruction Scope
SKILL.md only instructs the agent to make curl requests to the Distil proxy (configurable via DISTIL_PROXY_URL) and to write responses to stdout or a file (e.g., screenshot.png). This stays within the stated purpose, but be aware that any URL you ask the skill to fetch (and the content of that page) will be transmitted to the Distil service—so fetching internal, private, or sensitive URLs could leak data to a third party.
✓
Install Mechanism
Instruction-only skill with no install spec or code downloads; lowest-risk installation surface (relies on an existing curl binary).
✓
Credentials
Only DISTIL_API_KEY (primary credential) is required, plus an optional DISTIL_PROXY_URL. The requested environment access is minimal and appropriate for the described functionality. Treat the API key as sensitive.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills' configs. Autonomous invocation is allowed (platform default) but not excessive in itself.
Assessment
This skill behaves as documented: it sends requested URLs and their contents to the Distil proxy (https://proxy.distil.net by default) using your DISTIL_API_KEY. Before installing, consider whether you trust Distil with any pages you may request—do not ask the skill to fetch internal, intranet, or other sensitive URLs unless you trust the proxy or self-host it via DISTIL_PROXY_URL. Keep your DISTIL_API_KEY secret and consider using a scoped/revocable key or a self-hosted proxy if privacy is a concern. Note that curl commands may write files (e.g., screenshot.png) to the agent's environment—ensure the agent's runtime storage is appropriate for that data.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b50kz335hy33hsnc3rzrg2h81z392

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔍 Clawdis
Binscurl
EnvDISTIL_API_KEY
Primary envDISTIL_API_KEY

Comments