Our review
Fetches content from URLs using wget, supporting file downloads and API responses.
Strengths
- Simple and reliable fetching
- Supports HTTP headers and authentication
- Handles timeouts and retries
- Works for both display and file saving
Limitations
- Requires wget to be installed
- Not suitable for interactive web scraping (e.g., JavaScript rendering)
- May be blocked by some sites
Use when you need to quickly fetch a URL's content or download a file in a scripted environment.
Do not use for sites requiring browser-like interaction, complex sessions, or when you need to bypass dynamic content.
Security analysis
CautionThe skill uses wget to fetch content from user-provided URLs without safeguards, enabling actions like SSRF, downloading potentially malicious content, or exfiltrating data when combined with other skills. While the tool itself is legitimate, the lack of URL restrictions and the ability to output to files or stdout introduces moderate risk.
- •No URL validation or sanitization; allows fetching arbitrary URLs (potential SSRF, data exfiltration, or access to internal services).
- •Permits disabling SSL certificate validation via --no-check-certificate.
- •Allows credential provision directly on command line (--user/--password) or in headers, risking exposure in logs or command history.
- •Can write downloaded content to arbitrary filenames, potentially overwriting important files if combined with path traversal.
Examples
Read the content from https://example.comDownload the file from https://example.com/data.jsonFetch JSON from https://api.example.com/dataname: wget-reader description: Fetch data from URLs. Use when asked to download content, fetch remote files, or read web data. version: 1.0.0
Wget URL Reader
Overview
Fetches content from URLs using wget command-line tool. Supports downloading files, reading web pages, and retrieving API responses.
Instructions
-
When user provides a URL to read or fetch:
- Validate the URL format
- Use wget with appropriate flags based on content type
-
For reading content to stdout (display):
wget -qO- "<URL>" -
For downloading files:
wget -O "<filename>" "<URL>" -
For JSON API responses:
wget -qO- --header="Accept: application/json" "<URL>" -
Common wget flags:
-q: Quiet mode (no progress output)-O-: Output to stdout-O <file>: Output to specific file--header: Add custom HTTP header--timeout=<seconds>: Set timeout--tries=<n>: Number of retries--user-agent=<agent>: Set user agent
Examples
Example: Read webpage content
Input: "Read the content from https://example.com" Command:
wget -qO- "https://example.com"
Example: Download a file
Input: "Download the file from https://example.com/data.json" Command:
wget -O "data.json" "https://example.com/data.json"
Example: Fetch API with headers
Input: "Fetch JSON from https://api.example.com/data" Command:
wget -qO- --header="Accept: application/json" "https://api.example.com/data"
Example: Download with timeout and retries
Input: "Download with 30 second timeout" Command:
wget --timeout=30 --tries=3 -O "output.txt" "<URL>"
Guidelines
- Always quote URLs to handle special characters
- Use
-qflag to suppress progress bars in scripts - For large files, consider adding
--show-progressfor user feedback - Respect robots.txt and rate limits when fetching multiple URLs
- Use
--no-check-certificateonly when necessary (self-signed certs) - For authentication, use
--userand--passwordor--header="Authorization: Bearer <token>"
Next.js App Router Expert
Development
A skill that turns Claude into a Next.js App Router expert.
README Generator
Development
Creates professional and comprehensive README.md files for your projects.
API Documentation Writer
Development
Generates comprehensive API documentation in OpenAPI/Swagger format.