Model Context Protocol moderate risk

Website Downloader

Downloads websites recursively using wget, converting links for local use. Requires wget installation and allows specifying depth and output path.

Connections & Capabilities

Connects To

GitHubTwitter

Capabilities

readwriteexec

Quickstart

Install

brew install wget

Config

{
  "mcpServers": {
    "website-downloader": {
      "command": "node",
      "args": ["/path/to/website-downloader/build/index.js"]
    }
  }
}

Exposed MCP Tools (1)

moderate

download_website

Downloads a website to a specified output path using wget.

Writes files to the file system and executes an external command (wget).

Safety Assessment

This server is moderately safe if used responsibly. The risk comes from the underlying `wget` command and the potential for writing to the file system. Ensure the URL is trusted and the output path is carefully managed to mitigate risks. Limiting the download depth is also recommended.

Downloads are restricted to the same domain.
Preserves website structure.
Includes page requisites (CSS, images, etc.).
Allows specifying download depth.

Requires `wget` to be installed, potentially introducing system-level vulnerabilities if wget is compromised.
Writes files to the file system based on provided URL, which could lead to directory traversal or overwrite issues if not carefully managed.
No built-in input validation or sanitization on the URL, increasing the risk of command injection.
Unrestricted depth could lead to excessive resource consumption or denial-of-service if a large or circular website is targeted.
Output path is configurable, potentially allowing writing to sensitive directories.