defuddle
An agent skill by kepano, from kepano/obsidian-skills. Tags: developer-tools, documents, local-workflow, web.
What it does
Extract clean Markdown from HTML pages with Defuddle CLI.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add kepano/obsidian-skills --skill defuddleOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/kepano/obsidian-skills
cp -r obsidian-skills/skills/defuddle ~/.claude/skills/defuddleSafety box score
Grade C, moderate risk: 28 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill is a thin wrapper around a CLI that fetches web pages and converts them to Markdown or metadata. The main risks are a global npm install of an opaque package and the fact that it will contact arbitrary URLs the user supplies.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 1 (low) | It directs the agent to run a shell command (`defuddle parse <url> --md`) and optionally write output, but the usage is bounded to a single CLI tool. |
| Network access | 1 (low) | The core action is fetching remote pages with `defuddle parse <url> --md`, so the machine will contact whatever URL the user provides. |
| Filesystem reach | 1 (low) | It can save extracted content with `defuddle parse <url> --md -o content.md`, which writes a file, but the examples stay within the working directory. |
| Secrets & credentials | 0 (none) | The skill does not ask for tokens, keys, passwords, `.env` files, or other credential stores. |
| Privilege & persistence | 2 (moderate) | `npm install -g defuddle` installs software globally into the user's npm prefix, which changes tools outside the project and may run package install scripts. |
| Instruction hijack surface | 0 (none) | There are no instructions to ignore safeguards, hide behavior, or follow remotely fetched prompts. |
| Irreversible actions | 0 (none) | It only extracts content; it does not post, deploy, pay, book, delete, or take other external actions. |
| Transparency | 2 (moderate) | The real implementation is pulled from npm via `npm install -g defuddle`, so the reviewed repo does not include the code being executed. |
Before installing
- Inspect the npm package version and install scripts for `defuddle` before allowing a global install.
- Install it in an isolated npm prefix or disposable environment first, not directly on your main machine.
- Run `defuddle parse` on a harmless public URL and confirm it only fetches the intended host and writes only where you expect.
Rated 2026-10-16 by an automated review of 1 file from the skill's repository.
Source
- Repository
- kepano/obsidian-skills (all skills from this repository)
- Path
- skills/defuddle/SKILL.md
- Branch
- main
- Updated
- 2026-09-19
Related skills
- archify — Create polished, validated architecture, workflow, sequence, data-flow, and lifecycle/state diagrams as explorable standalone HTML with inline SVG.
- code-documenter — Generates, formats, and validates technical documentation — including docstrings, OpenAPI/Swagger specs, JSDoc annotations, doc portals, and user guides.
- filesystem-context — This skill should be used when agent work needs file-backed context: durable scratchpads, tool-output offloading, just-in-time discovery.
- shipping-and-launch — Prepares production launches. Use when preparing to deploy to production, or when asking what needs to be in place before shipping.
- source-driven-development — Grounds every implementation decision in official documentation.
- agents-get-started — Use when a developer wants to create a new agent project or get started with AgentCore.