URL to Markdown

PassAudited by ClawScan on May 11, 2026.

Overview

This skill appears to do what it claims—fetch web pages and save Markdown—but users should review the URLs and output paths because it can make network requests and create local files.

Before installing, confirm you are comfortable with a Python script fetching the URLs you provide and writing Markdown or image files to the paths you choose. Review batch URL lists and generated files, and avoid placing secrets or authenticated URLs in inputs unless you intentionally want them used for that request.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked with a large or untrusted URL list, the agent could make many web requests and create local Markdown/image files in the chosen location.

Why it was flagged

The skill intentionally fetches arbitrary user-supplied web pages, supports batch processing, and can download images and write output files. This is purpose-aligned, but it is still meaningful network and file-system activity.

Skill content
Works with any HTTP/HTTPS URL that returns HTML content... `-f, --file` File containing URLs to convert ... `--download-images` Download remote images to a local folder
Recommendation

Use intended URLs and output directories only, review batch URL files before running, and be cautious with optional image downloading.

What this means

It may be harder to verify that the bundled script matches the claimed upstream project or to track updates.

Why it was flagged

The registry metadata does not provide a verified source or homepage, even though a Python script is bundled and the README names a Git repository. There is no remote install or dependency download shown, so this is a provenance note rather than a concern.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

If provenance matters, inspect the bundled script and compare it with the repository referenced in the README before relying on it.

What this means

Generated Markdown may contain misleading, malicious, or instruction-like content from the source page if later fed back into an agent or knowledge base.

Why it was flagged

The skill can persist arbitrary web content into Markdown files intended for notes or knowledge bases. If those files are later reused as agent context, untrusted page text could be over-trusted.

Skill content
Save web page content as .md for documentation, archiving, or note-taking... YAML Frontmatter... for knowledge-base workflows
Recommendation

Treat generated files as untrusted web-derived content, keep source URLs visible, and review them before adding them to persistent agent memory or a shared knowledge base.