Web Fetch

• Risk level: Low
• Analyzed: Mar 31, 2026, 9:17 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill does what it claims — fetch a provided URL and return or save its contents — and its code, instructions, and requirements are consistent with that purpose.

This skill is internally consistent and implements a straightforward HTTP fetcher. Before using it: (1) be careful when specifying --output to avoid overwriting important files (it will write binary data to whatever path you provide); (2) only fetch URLs you trust — the tool will download content up to 5MB and save images to disk; (3) ensure your Node runtime supports global fetch and AbortSignal.timeout (modern Node 18+); and (4) if you need the agent to fetch pages from behind authentication, note the skill does not handle credentials. If any of these behaviors are unacceptable, do not enable the skill.