web page to pdf

Convert web pages to PDF files using Playwright, saving them in A4 format with margins after fully loading the page.

Security Scan

The skill's code and instructions match its stated purpose (convert a web page to PDF with Playwright); there is no evidence of hidden endpoints, credential requests, or unrelated behavior — but it will fetch and render arbitrary URLs so run it in a sandbox and avoid untrusted targets.

Purpose & Capability

Name/description, SKILL.md, and the included script all align: the script uses Playwright/Chromium to load a URL and save an A4 PDF with margins. No unrelated binaries, environment variables, or capabilities are requested.

Instruction Scope

Instructions and script stay on-purpose (invoke python pdf2.py <url>). The script navigates to the provided URL and writes a PDF to the current working directory. Important caveats: the browser executes page JS and fetches resources from the network, so rendering arbitrary/untrusted URLs can cause outbound network activity (and may reach internal network endpoints), and the page content may trigger large downloads or heavy CPU usage. The SKILL.md does not instruct any unrelated file reads, env access, or external posting.

Install Mechanism

No automatic install spec is included (instruction-only). SKILL.md suggests running 'pip install playwright' and 'playwright install chromium' if needed — this is a standard, explicit manual setup step and not an automated download-from-arbitrary-URL install. Note: installing Playwright downloads browser binaries which are large but expected for this capability.

Credentials

The skill requests no environment variables, no credentials, and no config paths. The script does not read secrets or external environment state. This is proportionate to its stated function.

Persistence & Privilege

Skill is not always-enabled and allows normal model invocation. It does not modify other skills or system-wide agent settings and does not request persistent privileges.

Assessment

This skill appears to do exactly what it claims: open a URL in a Playwright-driven Chromium instance and save a PDF. Before using it, consider: 1) Only convert trusted or internal-allowed URLs — the browser will execute page JavaScript and make network requests which could contact external or internal services (SSRF risk). 2) Run the tool in a sandboxed environment or an isolated container if you plan to convert untrusted sites. 3) Be aware that installing Playwright will download browser binaries (large) and that PDF output is written to the current working directory. 4) If you need stricter controls, validate/whitelist URLs, limit network access for the process, or run it on a separate VM. The code itself contains no hidden endpoints or credential exfiltration logic.

Web to PDF Converter

Convert web pages to PDF files using Playwright.

Usage

python pdf2.py <url> [output_filename]

Examples

# Convert a webpage to PDF (uses domain name as filename)
python pdf2.py https://example.com

# Specify custom output filename
python pdf2.py https://example.com my-document.pdf

# Short URL (https:// is added automatically)
python pdf2.py example.com output.pdf

Setup

If playwright is not installed:

pip install playwright
playwright install chromium

Script Location

The script is located at: skills/web2pdf/scripts/pdf2.py

Notes

• The script uses Chromium via Playwright for accurate rendering
• Waits for network idle before PDF generation to ensure page is fully loaded
• Output is saved to the current working directory
• A4 format with 20px margins is used by default