Security audit
Security checks for vulnerabilities and agentic risk
This web-to-Markdown skill mostly matches its purpose, but its URL fetching is too broad and can access local or internal resources if given crafted URLs.
Review before installing in environments that can reach internal services, cloud metadata endpoints, or sensitive local files. Use only trusted public HTTP/HTTPS URLs, avoid attacker-supplied URL lists, and be cautious with --download-images and batch mode because they can make additional requests and write many local files.
scripts/url2md.py:1018Unrestricted URL Fetching Enables Local File Disclosure and Server-Side Request Forgery
The request header hard-codes "Accept-Language: en-US,en;q=0.9", which imposes a specific language/locale preference on all fetched pages regardless of user preference. SQP-3 covers natural-language policy violations, and this is a locale constraint that is neither optional nor justified as region-specific behavior.
The image-download path reuses a browser-like request pattern tied to page retrieval behavior that already enforces an English locale for content acquisition, but the tool never offers user choice over localization behavior. This contributes to a skill design that assumes English output rather than respecting or documenting locale selection.
The skill explicitly operates on arbitrary HTTP/HTTPS URLs, but the description does not warn users that invoking it causes outbound network requests to third-party hosts and exposes requester metadata such as IP address and user-agent. This can create privacy, compliance, or SSRF-adjacent risk in environments where users may supply sensitive internal URLs or assume the action is purely local.
The skill documents writing output files, batch directory output, and image downloading, but does not clearly warn that a single invocation may create many files on disk. In automated or shared environments this can surprise users, consume storage, overwrite expected locations, or leave behind persisted copies of fetched content and assets.
This code performs outbound network requests and includes explicit request headers, including an Accept-Language value, but the script provides no user-facing warning in its help text or documentation that invoking it will contact remote servers and transmit client metadata. Because SQP-2 applies to code files for network calls that transmit user or system data, the absence of disclosure is a quality/safety issue.
No suspicious patterns detected.