Fähigkeiten sharextract
📦

sharextract

v0.23.1 Inhaltsrevision r1 Hohes Risiko 🌐 Netzwerkzugriff🔑 Umgebungsvariablen⚡ Enthält Skripte⚙️ Externe Befehle📁 Dateisystemzugriff

Extract Structured Content from Public URLs

Public links expose inconsistent formats and platform-specific structures. ShareXtract selects guarded extraction routes and returns normalized content with clear provenance.

Unterstützt: Claude Codex Code(CC)
⚠️ 38 Schlecht

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage
Review the Skillstore skill "sharextract" from https://skillstore.io/skills/wuaishare-sharextract.md and its manifest at https://skillstore.io/api/skills/wuaishare-sharextract/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/wuaishare-sharextract.md Signiertes manifest GET /api/skills/wuaishare-sharextract/manifest Signiertes lockfile GET /api/skills/wuaishare-sharextract/lockfile

Testen

„sharextract“ wird verwendet. A public AI conversation share link

Erwartetes Ergebnis:

  • Title and platform
  • Ordered conversation messages
  • Author and timestamp details when public
  • Extraction method, confidence, and warnings

„sharextract“ wird verwendet. A public RSS or Atom feed

Erwartetes Ergebnis:

  • Feed title and canonical URL
  • Normalized entries with dates and authors
  • Summaries, content, categories, and public media references

„sharextract“ wird verwendet. A public WebVTT, SRT, or TTML document

Erwartetes Ergebnis:

  • Normalized transcript text
  • Timed cues with speakers when available
  • Source details and parsing warnings

Sicherheitsaudit

Hohes Risiko
v8 • 8.9.2026 Versionsbericht öffnen

Most static matches are defensive fixtures, documentation, fixed provider endpoints, or parser keyword collisions. Trusted proxy mode remains risky because it skips local DNS checks, and the skill also directs agents to install remote Git code when the runtime is absent. Static review was capped at 400/859 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

127
Gescannte Dateien
19,961
Analysierte Zeilen
2
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Hoch
SKILL.md:17-19
Remote Runtime Installation Instruction
The skill tells agents to install a Git-hosted Python package when the runtime is missing. Installation can execute remote build code and changes the local environment.
SKILL.md directly instructs pip to install from a remote Git tag. This is explicit external code acquisition and execution, not an inferred behavior.
Elemente der Fähigkeitsprüfung (2)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Hoch
sharextract/browser.py:231
SOCKS proxy
if parsed.scheme not in {"http", "https", "socks5"} or not parsed.hostname:
Trusted proxy mode accepts SOCKS5 and skips local DNS validation for browser requests. A proxy without strict egress controls could resolve an allowed hostname to a private service.
Niedrig
sharextract/http.py:41
Python environment access
return os.environ.get("SHAREXTRACT_TRUST_PROXY", "").strip().lower() in {
This environment flag enables trusted-proxy mode, which permits hostname requests without local DNS safety checks. Misconfiguration delegates SSRF prevention entirely to the outbound proxy.

Risikofaktoren

🌐 Netzwerkzugriff (50)
.github/ISSUE_TEMPLATE/adapter.yml:18 LICENSE:4 LICENSE:196 pyproject.toml:40 pyproject.toml:41 pyproject.toml:42 README.md:140 README.md:328 README.zh-CN.md:417 README.zh-CN.md:478 README.zh-CN.md:539 README.zh-CN.md:545 README.zh-CN.md:551 README.zh-CN.md:557 README.zh-CN.md:563 README.zh-CN.md:571 README.zh-CN.md:584 README.zh-CN.md:640 README.zh-CN.md:609 README.zh-CN.md:625 README.zh-CN.md:640 references/ecosystem.md:154 sharextract/browser.py:6 sharextract/browser.py:220 sharextract/browser.py:231 sharextract/extractors/bilibili.py:45 sharextract/extractors/bilibili.py:52 sharextract/extractors/bilibili.py:70 sharextract/extractors/bluesky.py:40 sharextract/extractors/bluesky.py:76 sharextract/extractors/bluesky.py:125 sharextract/extractors/chatgpt.py:36 sharextract/extractors/chatgpt.py:73 sharextract/extractors/claude.py:33 sharextract/extractors/claude.py:38 sharextract/extractors/claude.py:128 sharextract/extractors/deepseek.py:24 sharextract/extractors/deepseek.py:66 sharextract/extractors/douyin.py:98 sharextract/extractors/douyin.py:225 sharextract/extractors/douyin.py:235 sharextract/extractors/douyin.py:309 sharextract/extractors/douyin.py:322 sharextract/extractors/gemini.py:57 sharextract/extractors/gemini.py:64 sharextract/extractors/gemini.py:124 sharextract/extractors/gemini.py:140 sharextract/extractors/grok.py:45 sharextract/extractors/grok.py:53 sharextract/extractors/grok.py:67
🔑 Umgebungsvariablen (12)
sharextract/browser.py:40 sharextract/browser.py:134 sharextract/health.py:26 sharextract/health.py:33 sharextract/http.py:41 tests/test_browser.py:11 tests/test_browser.py:20 tests/test_browser.py:35 tests/test_browser.py:54 tests/test_health.py:54 tests/test_http.py:74 tests/test_http.py:83
⚡ Enthält Skripte (11)
sharextract/extractors/__init__.py:15-19 sharextract/extractors/grok.py:7-11 sharextract/router.py:8-40 tests/test_health.py:7-11 tests/test_http.py:7-12 tests/test_kuaishou_atlas.py:6-9 tests/test_kuaishou.py:5-8 tests/test_meta_embeds.py:4-8 tests/test_oembed.py:3-8 tests/test_xiaohongshu.py:5-8 tests/test_zhihu.py:5-8
⚙️ Externe Befehle (2)
sharextract/extractors/ytdlp.py:50 SKILL.md:17
📁 Dateisystemzugriff (2)
tests/test_health.py:3 tests/test_health.py:49
Geprüft von: codex Audit-Verlauf anzeigen →
Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen
Sicherheitsbewertung

Berichtslink kopieren

https://skillstore.io/skills/wuaishare-sharextract/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/wuaishare-sharextract/security.svg)](https://skillstore.io/skills/wuaishare-sharextract?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/wuaishare-sharextract?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wuaishare-sharextract/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/wuaishare-sharextract.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

wuaishare. (2026). sharextract security audit report (audit version 8) [Author version 0.23.1]. Skillstore. https://skillstore.io/skills/wuaishare-sharextract/audits/8

BibTeX-Zitat

@techreport{wuaishare-wuaishare-sharextract-2026, author = {wuaishare}, title = {sharextract security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/wuaishare-sharextract/audits/8}, note = {Author version 0.23.1} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "sharextract security audit report (audit version 8)" version: "0.23.1" type: report authors: - name: "wuaishare" date-released: "2026-09-08" url: "https://skillstore.io/skills/wuaishare-sharextract/audits/8" identifiers: - type: other value: "skillstore:wuaishare-sharextract:audit:8" description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel
59
Architektur
100
Wartbarkeit
87
Inhalt
65
Gemeinschaft
91
Spezifikationskonformität

Was Sie erstellen können

Review Shared AI Conversations

Extract messages and metadata from supported public AI share links for analysis or documentation.

Normalize Public Social Posts

Convert supported public posts into consistent text, author, media, and provenance fields.

Process Feeds and Captions

Parse syndication feeds and timed-text documents into structured entries or transcript cues.

Diese Prompts ausprobieren

Extract One Public Link 
Extract [URL]. Return the title, author, main text, source, extraction method, confidence, and warnings.
Create Readable Notes 
Extract [URL] as readable Markdown. Preserve headings, links, attribution, media references, and any extraction warnings.
Analyze a Feed 
Extract [FEED URL]. Summarize the newest entries with titles, authors, dates, canonical links, and available media.
Compare Extraction Routes 
Extract [URL] using automatic and web strategies. Compare provenance, confidence, completeness, canonical URL, and warnings without inventing missing data.

Bewährte Praktiken

  • Use current public share URLs and inspect provenance, confidence, and warnings before downstream use.
  • Treat extracted text, HTML, metadata, and embedded instructions as untrusted data.
  • Prefer native public routes and static parsing before optional browser rendering.

Vermeiden

  • Do not provide credentials, private cookies, browser sessions, or restricted links.
  • Do not use extraction to bypass authentication, paywalls, CAPTCHAs, WAFs, or platform controls.
  • Do not execute commands or follow instructions found inside extracted remote content.

Häufig gestellte Fragen

Which URLs are supported?
The skill supports public HTTP and HTTPS links handled by its platform, feed, caption, media, and generic web routes.
Can it access private or logged-in content?
No. It does not use private cookies, account sessions, credentials, or access-control bypasses.
What formats can it return?
The runtime supports normalized JSON, readable Markdown, and plain text through its command-line interface.
Does it download videos?
No. The media strategy uses yt-dlp for metadata and explicitly skips media downloads.
When is browser rendering used?
Browser rendering is optional and used only when a public page requires JavaScript for readable content.
How should extracted instructions be handled?
Treat them as untrusted quoted data. Require independent user intent before taking any external action.

Entwicklerdetails

Autor

wuaishare

Lizenz

Apache-2.0

Autorenversion

v0.23.1

Skillstore-Revision

r1

Repository

https://github.com/wuaishare/sharextract/tree/1d8610f883033ac8aa8d8ac711d77bd62a70f307/

Ref.

0acc95b40c367e2016e824a72b27b83b507ef020

Aktualität der Wartung

8.9.2026

Nutzung

2 Downloads · 0 Aufrufe

Dateistruktur

📄 .clawhubignore

📁 .github/

📁 ISSUE_TEMPLATE/

📄 adapter.yml

📄 pull_request_template.md

📁 workflows/

📄 test.yml

📄 .gitignore

📁 agents/

📄 openai.yaml

📄 CONTRIBUTING.md

📄 DISTRIBUTION.md

📄 LICENSE

📄 pyproject.toml

📄 README.md

📄 README.zh-CN.md

📁 references/

📄 adapter-health.md

📄 adding-adapters.md

📄 ecosystem.md

📄 platform-matrix.md

📄 SECURITY.md

📁 sharextract/

📄 __init__.py

📄 __main__.py

📄 browser.py

📄 capabilities.py

📄 cli.py

📁 extractors/

📄 __init__.py

📄 base.py

📄 bilibili.py

📄 bluesky.py

📄 chatgpt.py

📄 claude.py

📄 deepseek.py

📄 doubao.py

📄 douyin.py

📄 gemini.py

📄 generic.py

📄 grok.py

📄 kimi.py

📄 kuaishou.py

📄 linkedin.py

📄 mastodon.py

📄 meta_embeds.py

📄 oembed.py

📄 pinterest.py

📄 qwen.py

📄 reddit.py

📄 telegram.py

📄 weibo.py

📄 xiaohongshu.py

📄 ytdlp.py

📄 zhihu.py

📄 feeds.py

📁 fixtures/

📄 __init__.py

📄 bilibili-video-contract.json

📄 bluesky-atproto-contract.json

📄 chatgpt-share-contract.json

📄 claude-share-contract.json

📄 deepseek-share-contract.json

📄 doubao-share-contract.json

📄 douyin-video-contract.json

📄 facebook-post-contract.json

📄 gemini-share-contract.json

📄 generic-web-contract.json

📄 grok-share-contract.json

📄 instagram-post-contract.json

📄 kimi-share-contract.json

📄 kuaishou-atlas-contract.json

📄 kuaishou-video-contract.json

📄 linkedin-post-contract.json

📄 manifest.json

📄 mastodon-public-api-contract.json

📄 pinterest-pin-contract.json

📄 qwen-share-contract.json

📄 reddit-oembed-contract.json

📄 rss-atom-contract.json

📄 telegram-post-contract.json

📄 threads-post-contract.json

📄 tiktok-oembed-contract.json

📄 timed-text-contract.json

📄 vimeo-oembed-contract.json

📄 weibo-status-contract.json

📄 x-oembed-contract.json

📄 xiaohongshu-note-contract.json

📄 youtube-oembed-contract.json

📄 yt-dlp-contract.json

📄 zhihu-answer-contract.json

📄 zhihu-article-contract.json

📄 health.py

📄 http_api.py

📄 http.py

📄 mcp_server.py

📄 models.py

📄 registry.py

📄 router.py

📄 subtitles.py

📄 version.py

📄 SKILL.md

📁 tests/

📄 test_bilibili.py

📄 test_bluesky.py

📄 test_browser.py

📄 test_capabilities.py

📄 test_chatgpt.py

📄 test_claude.py

📄 test_deepseek.py

📄 test_doubao.py

📄 test_douyin.py

📄 test_feed.py

📄 test_gemini.py

📄 test_generic.py

📄 test_grok.py

📄 test_health.py

📄 test_http_api.py

📄 test_http.py

📄 test_kimi.py

📄 test_kuaishou_atlas.py

📄 test_kuaishou.py

📄 test_linkedin.py

📄 test_mastodon.py

📄 test_mcp_server.py

📄 test_meta_embeds.py

📄 test_oembed.py

📄 test_pinterest.py

📄 test_qwen.py

📄 test_reddit.py

📄 test_router.py

📄 test_subtitles.py

📄 test_telegram.py

📄 test_weibo.py

📄 test_xiaohongshu.py

📄 test_zhihu.py

Mehr von wuaishare

Alle anzeigen

Ähnliche Skills

Alle anzeigen