Tinyfish Fetch

Fetch web pages via TinyFish Fetch API and get clean markdown, HTML, or screenshots back — handles JS rendering and proxying. Use when you need to read a spe...

Security Scan

The skill's requirements, instructions, and included script align with its stated purpose (calling the TinyFish Fetch API) and do not request unrelated privileges or perform unexpected actions.

Purpose & Capability

Name/description ask for a fetcher service and the skill only requires a single TINYFISH_API_KEY and calls https://api.fetch.tinyfish.ai. The requested credential and network access are proportional to the stated purpose.

Instruction Scope

SKILL.md only instructs the agent to check the TINYFISH_API_KEY and to POST JSON to the TinyFish API; it does not instruct reading unrelated files, additional environment variables, or transmitting data to unexpected endpoints. It explicitly forbids fallback to other fetch tools.

Install Mechanism

No install spec; this is instruction-only with a small helper script included. The script uses standard tools (python3, curl) and does not download or install external code.

Credentials

Only TINYFISH_API_KEY is required and is reasonable for an API client. No other secret or unrelated credentials are requested.

Persistence & Privilege

The skill does not request always:true or any elevated persistent privileges. It does not modify other skills or system-wide configuration.

Assessment

This skill appears coherent and limited to calling the TinyFish Fetch API, but consider the following before installing: 1) The API key grants the service the ability to fetch URLs you ask it to — do not send sensitive, private, or internal URLs unless you trust TinyFish's privacy policy and security. 2) The helper script runs python3 and curl locally; ensure those binaries are acceptable in your environment. 3) Confirm the service's reputation, pricing, and data-retention rules at the homepage (https://docs.tinyfish.ai/fetch-api) and restrict/rotate the API key as appropriate. 4) If deploying in a controlled environment, verify outbound network rules to api.fetch.tinyfish.ai and consider using a scoped key or organizational approval for third-party fetchers.

Fetch one or more URLs via the TinyFish Fetch API. Returns rendered page content (markdown by default), optionally with screenshots, behind an optional proxy.

Requires: TINYFISH_API_KEY environment variable.

Pre-flight Check (REQUIRED)

Before calling the API, verify the key is present:

[ -n "$TINYFISH_API_KEY" ] && echo "TINYFISH_API_KEY is set" || echo "TINYFISH_API_KEY is NOT set"

If the key is not set, stop and ask the user to add it. Get one at https://agent.tinyfish.ai/api-keys. Do NOT fall back to other fetch tools.

Basic Fetch

curl -X POST "https://api.fetch.tinyfish.ai" \
  -H "X-API-Key: $TINYFISH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "urls": ["https://example.com"],
    "format": "markdown"
  }'

format accepts markdown (default), html, or screenshot.

Multiple URLs

curl -X POST "https://api.fetch.tinyfish.ai" \
  -H "X-API-Key: $TINYFISH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "urls": [
      "https://example.com",
      "https://example.org"
    ],
    "format": "markdown"
  }'

Proxy / Geo Targeting

curl -X POST "https://api.fetch.tinyfish.ai" \
  -H "X-API-Key: $TINYFISH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "urls": ["https://example.com"],
    "format": "markdown",
    "proxy_config": { "country": "US" }
  }'

Helper Script

scripts/fetch.sh <url> [<url> ...] [--format markdown|html|screenshot] [--country CC] wraps the curl call:

scripts/fetch.sh https://example.com
scripts/fetch.sh https://example.com https://example.org --format html
scripts/fetch.sh https://example.com --format markdown --country US

Response Shape

{
  "results": [
    {
      "url": "https://example.com",
      "status": 200,
      "content": "# Example Domain\n\nThis domain is for use…",
      "format": "markdown"
    }
  ]
}

Read results[].content for the rendered page. Screenshot format returns base64-encoded PNG data.