Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Baoyu Url To Markdown

v1.109.0

Fetch any URL and convert to markdown using baoyu-fetch CLI (Chrome CDP with site-specific adapters). Built-in adapters for X/Twitter, YouTube transcripts, H...

0· 1.6k·55 current·56 all-time
byJim Liu 宝玉@jimliu

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for jimliu/baoyu-url-to-markdown.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Baoyu Url To Markdown" (jimliu/baoyu-url-to-markdown) from ClawHub.
Skill page: https://clawhub.ai/jimliu/baoyu-url-to-markdown
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install baoyu-url-to-markdown

ClawHub CLI

Package manager switcher

npx clawhub@latest install baoyu-url-to-markdown
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description match what the package actually does: it bundles a CLI (scripts/baoyu-fetch) that drives Chrome CDP and site-specific adapters to convert pages to markdown. Requesting the 'bun' runtime is reasonable because the shipped CLI is a Bun/Node TypeScript project. There are no unrelated cloud credentials or surprising external services requested.
Instruction Scope
SKILL.md instructs the agent to run the vendored CLI, prompt users for preferences, perform quality checks on produced markdown, and (when needed) open a visible Chrome instance for login/CAPTCHA handling. Those behaviors match the purpose, but the agent is also instructed to create EXTEND.md in user or project config locations and to re-run the CLI to download media when requested. The skill can therefore read and write files under the project and user config/home directories and will prompt the user to interactively sign in to sites when required.
Install Mechanism
There is no separate registry 'install' spec, but SKILL.md explicitly requires resolving bun and running 'bun install --cwd {baseDir}/scripts' if node_modules is missing. That will fetch many third-party packages (bun.lock lists numerous dependencies). This is expected for a bundled CLI but does involve network installs from public registries and writing dependencies to disk (moderate risk compared to instruction-only skills).
Credentials
The skill does not request environment variables or external tokens, which is proportional. However adapters include cookie export/restore logic (e.g., X/Twitter cookie sidecar) and the skill will save preferences and downloaded media to user-specified or project paths. Those file- and cookie-related operations are plausible for the feature set but are sensitive (session cookies, media and config files).
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skill configurations. It does persist its own preferences (EXTEND.md) and may write downloaded media and cookie sidecar files to project/user paths as part of normal operation; this is expected scope for a scraper-style CLI.
Assessment
This skill appears to be what it claims: a bundled CLI that launches Chrome (via CDP) to convert pages to Markdown. Before installing or running it, note: (1) it requires Bun and will run 'bun install' in the skill directory, which downloads many npm packages to disk; (2) it will write preferences (EXTEND.md) to your home or project and save downloaded media to output directories you choose; (3) the X/Twitter adapter can export/restore session cookies (sensitive) to local files if used — only allow cookie export if you understand the implications; (4) when pages require login/CAPTCHA the skill will open a visible browser and ask you to sign in (manual interaction). If you are comfortable with those behaviors, proceed; if you need stricter isolation, run the CLI in a disposable environment or inspect the bundled scripts fully before use.
scripts/lib/browser/profile.ts:83
Shell command execution detected (child_process).
scripts/lib/browser/profile.ts:29
Environment variable access combined with network send.
!
scripts/lib/browser/profile.ts:149
File read combined with network send (possible exfiltration).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Any binbun
latestvk9744vhmd0hajzxbptzjtrq1c58584r4
1.6kdownloads
0stars
11versions
Updated 9h ago
v1.109.0
MIT-0

URL to Markdown

Fetches any URL via baoyu-fetch CLI (Chrome CDP + site-specific adapters) and converts it to clean markdown.

User Input Tools

When this skill prompts the user, follow this tool-selection rule (priority order):

  1. Prefer built-in user-input tools exposed by the current agent runtime — e.g., AskUserQuestion, request_user_input, clarify, ask_user, or any equivalent.
  2. Fallback: if no such tool exists, emit a numbered plain-text message and ask the user to reply with the chosen number/answer for each question.
  3. Batching: if the tool supports multiple questions per call, combine all applicable questions into a single call; if only single-question, ask them one at a time in priority order.

Concrete AskUserQuestion references below are examples — substitute the local equivalent in other runtimes.

CLI Setup

Important: The CLI source is vendored in {baseDir}/scripts/lib. scripts/package.json installs only third-party runtime dependencies.

Agent Execution Instructions:

  1. Determine this SKILL.md file's directory path as {baseDir}
  2. Resolve ${BUN} runtime: if bun installed → bun; else suggest installing Bun
  3. If {baseDir}/scripts/node_modules does not exist, run ${BUN} install --cwd {baseDir}/scripts
  4. ${READER} = {baseDir}/scripts/baoyu-fetch
  5. Replace all ${READER} in this document with the resolved value

Preferences (EXTEND.md)

Check EXTEND.md in priority order — the first one found wins:

PriorityPathScope
1.baoyu-skills/baoyu-url-to-markdown/EXTEND.mdProject
2${XDG_CONFIG_HOME:-$HOME/.config}/baoyu-skills/baoyu-url-to-markdown/EXTEND.mdXDG
3$HOME/.baoyu-skills/baoyu-url-to-markdown/EXTEND.mdUser home
ResultAction
FoundRead, parse, apply settings
Not foundMUST run first-time setup (see below) — do NOT silently create defaults

EXTEND.md supports: download media by default, default output directory.

First-Time Setup ⛔ BLOCKING

When EXTEND.md is not found, you MUST use AskUserQuestion to gather preferences before creating EXTEND.md. NEVER create EXTEND.md with silent defaults. Generation is BLOCKED until setup completes. Batch all three questions into a single call:

  • Q1 — Media (header "Media"): "How to handle images and videos in pages?"
    • "Ask each time (Recommended)" — Prompt after each save
    • "Always download" — Download to local imgs/ and videos/
    • "Never download" — Keep remote URLs
  • Q2 — Output (header "Output"): "Default output directory?"
    • "url-to-markdown (Recommended)" — Save to ./url-to-markdown/{domain}/{slug}.md
    • User may pick "Other" and type a custom path
  • Q3 — Save (header "Save"): "Where to save preferences?"
    • "User (Recommended)" — ~/.baoyu-skills/ (all projects)
    • "Project" — .baoyu-skills/ (this project only)

After answers, write EXTEND.md, confirm "Preferences saved to [path]", then continue.

Full template: references/config/first-time-setup.md.

Supported Keys

KeyDefaultValuesDescription
download_mediaaskask / 1 / 0ask = prompt each time, 1 = always, 0 = never
default_output_diremptypath or emptyDefault output directory (empty = ./url-to-markdown/)

EXTEND.md → CLI mapping:

EXTEND.md keyCLI argumentNotes
download_media: 1--download-mediaRequires --output to be set
default_output_dir: ./posts/Agent constructs --output ./posts/{domain}/{slug}.mdAgent generates path, not a direct flag

Value priority: CLI arguments → EXTEND.md → skill defaults.

Usage

# Default: headless capture, markdown to stdout
${READER} <url>

# Save to file
${READER} <url> --output article.md

# Save with media download
${READER} <url> --output article.md --download-media

# Wait for interaction (login/CAPTCHA) — auto-detect and continue
${READER} <url> --wait-for interaction --output article.md

# Wait for interaction — manual control (Enter to continue)
${READER} <url> --wait-for force --output article.md

# JSON output
${READER} <url> --format json --output article.json

# Force specific adapter
${READER} <url> --adapter youtube --output transcript.md

Options

OptionDescription
<url>URL to fetch
--output <path>Output file path (default: stdout)
--format <type>Output format: markdown (default) or json
--jsonShorthand for --format json
--adapter <name>Force adapter: x, youtube, hn, or generic (default: auto-detect)
--headlessForce headless Chrome (no visible window)
--wait-for <mode>Interaction wait mode: none (default), interaction, or force
--wait-for-interactionAlias for --wait-for interaction
--wait-for-loginAlias for --wait-for interaction
--timeout <ms>Page load timeout (default: 30000)
--interaction-timeout <ms>Login/CAPTCHA wait timeout (default: 600000 = 10 min)
--interaction-poll-interval <ms>Poll interval for interaction checks (default: 1500)
--download-mediaDownload images/videos to local imgs/ and videos/, rewrite markdown links. Requires --output
--media-dir <dir>Base directory for downloaded media (default: same as --output directory)
--cdp-url <url>Reuse existing Chrome DevTools Protocol endpoint
--browser-path <path>Custom Chrome/Chromium binary path
--chrome-profile-dir <path>Chrome user data directory (default: BAOYU_CHROME_PROFILE_DIR env or ./baoyu-skills/chrome-profile)
--debug-dir <dir>Write debug artifacts (document.json, markdown.md, page.html, network.json)

Agent Quality Gate

CRITICAL: treat default headless capture as provisional. Some sites render differently in headless mode and can silently return low-quality content without failing the CLI.

After every headless run, inspect the saved markdown. See references/quality-gate.md for the full checklist, recovery workflow, and capture-mode table. Read it whenever a run looks suspicious or the user asks about login/CAPTCHA handling.

Output Path Generation

The agent must construct the output file path — baoyu-fetch does not auto-generate paths.

Algorithm:

  1. Determine base directory from EXTEND.md default_output_dir or default ./url-to-markdown/
  2. Extract domain from URL (e.g., example.com)
  3. Generate slug from URL path or page title (kebab-case, 2-6 words)
  4. Construct: {base_dir}/{domain}/{slug}/{slug}.md — each URL gets its own directory so media files stay isolated
  5. Conflict resolution: append timestamp {slug}-YYYYMMDD-HHMMSS/{slug}-YYYYMMDD-HHMMSS.md

Pass the constructed path to --output. Media files (--download-media) are saved into subdirectories next to the markdown file, keeping each URL's assets self-contained.

Adapters & Media

See references/adapters.md for the adapter catalog (X, YouTube, Hacker News, generic), per-adapter notes, the media download flow (ask / always / never), and the JSON output schema. Read it before answering adapter-specific questions or handling media prompts.

Environment Variables

VariableDescription
BAOYU_CHROME_PROFILE_DIRChrome user data directory (can also use --chrome-profile-dir)

Troubleshooting: Chrome not found → use --browser-path. Timeout → increase --timeout. Login/CAPTCHA → --wait-for interaction. Debug → --debug-dir to inspect captured HTML and network logs.

Extension Support

Custom configurations via EXTEND.md. See Preferences section above for paths and supported keys.

Comments

Loading comments...