File Downloader

Download a file from a URL and save it locally.

Security Scan

The skill's code and instructions match its stated purpose (download a file and save it locally); there are no hidden network endpoints or unrelated credentials, but it allows writing arbitrary paths and fetching arbitrary URLs which carries normal operational risks (overwrites, SSRF, large downloads).

Purpose & Capability

Name/description match the provided script and SKILL.md. The included Python script implements exactly the advertised behavior (HTTP/HTTPS download and save). No unrelated binaries, services, or credentials are requested.

Instruction Scope

Instructions are limited to running the included script with --url and optional --save_path. They permit downloading arbitrary URLs and writing to any filesystem path the caller provides; this is expected for a downloader but grants broad discretion to write files and access network resources. There is no input validation or sandboxing described.

Install Mechanism

Instruction-only skill with a small Python script; no install spec and no remote downloads of code. The only dependency is the well-known 'requests' package (not installed automatically by the skill).

Credentials

No environment variables, credentials, or config paths are requested. The skill does not attempt to access secrets or unrelated services.

Persistence & Privilege

always is false and the skill does not request persistent system-level presence or modify other skills. It runs only when invoked.

Assessment

This skill appears coherent with its purpose, but be aware of normal risks when running a downloader: - It will fetch any URL you provide and write to whatever save_path you pass; a malicious or mistaken path can overwrite important files. Avoid running as root and avoid giving absolute paths unless you trust them. - The script will attempt to reach arbitrary network locations; an attacker could use it to probe internal services (SSRF). Run in a network-restricted or sandboxed environment if that is a concern. - Large downloads can consume disk and time; there is no size limit or content-type validation. - Scan downloaded files before opening and restrict allowed URL hosts/paths if possible. - Ensure the Python 'requests' dependency is installed in a controlled environment (pip install requests). If you need stricter safety, request a version that enforces allowed hostnames, enforces destination directory whitelists, and validates or limits download size.

downloader

Download a file from a given URL and save it to a specified local path. Supports any file type accessible via HTTP/HTTPS.

When to Use

✅ USE this skill when:

• When the user wants to download a file from a URL to the local machine.
• When the user needs to save a remote resource (image, audio, video, document, etc.) locally.
• When the user provides a download link and wants to store the file at a specific path.

When NOT to Use

❌ DON'T use this skill when:

• When the user only wants to view or read a URL content without saving to disk.

Parameters

Parameter	Type	Required	Description
url	string	Yes	The URL of the file to download
save_path	string	No	Local path to save the file (defaults to current directory with original filename)

Commands

Basic Call

python3 scripts/download.py --url 'https://example.com/file.png'

Save to a specific path

python3 scripts/download.py --url 'https://example.com/file.png' --save_path './downloads/image.png'

Examples

"Help me download this image."

python3 scripts/download.py --url 'https://example.com/photo.jpg'

"Download this PDF and save it to the reports folder."

python3 scripts/download.py --url 'https://example.com/report.pdf' --save_path './reports/report.pdf'

Response

Script outputs JSON to stdout:

• code = 0 — success, data contains the local file path where the file was saved
• code != 0 — error, show message to the user and suggest retrying

{
  "code": 0,
  "message": "success",
  "data": "./downloads/file.png"
}

Notes

• Requires requests package: pip install requests