扫描报告
0 /100
pdf-to-html
Convert PDF documents to HTML using MinerU. Transforms PDF files into web-ready HTML with structure and formatting preserved.
This is a thin wrapper skill containing only documentation for a legitimate open-source CLI tool (mineru-open-api). No executable code, scripts, or dependencies are present, and the only network access is via the documented CLI tool that users install separately.
可以安装
This skill is safe to use. The SKILL.md is purely documentation for an open-source MinerU CLI tool published by Shanghai AI Lab. No code is executed; the agent simply passes commands to the installed mineru-open-api binary.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in SKILL.md; filesystem access is handled by the user-install… |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md documents URL input support ('From URL' example); this is explicitly de… |
| 命令执行 | NONE | NONE | — | SKILL.md documents CLI commands but does not execute them; execution is delegate… |
| 环境变量 | READ | READ | ✓ 一致 | SKILL.md line 36: 'export MINERU_TOKEN="your-token"' — token env var declared an… |
| 技能调用 | NONE | NONE | — | No skill-to-skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser automation |
| 数据库 | NONE | NONE | — | No database access |
2 项发现
中危 外部 URL 外部 URL
https://mineru.net SKILL.md:4 中危 外部 URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:42 目录结构
1 文件 · 2.7 KB · 57 行 Markdown 1f · 57L
└─
SKILL.md
Markdown
安全亮点
✓ No executable code — skill consists only of documentation
✓ No dependencies or package files that could contain malicious code
✓ Uses a well-known open-source project (MinerU by OpenDataLab/Shanghai AI Lab)
✓ All functionality is explicitly declared in SKILL.md
✓ Token-based authentication is standard practice for API services
✓ CLI tool installation paths (npm, go) are standard and auditable
✓ No hidden instructions, encoded payloads, or suspicious patterns
✓ Source repository (github.com/opendatalab/MinerU) is publicly verifiable