Scan Report
5 /100
doc-parse
Parse and extract structured content from Word documents (.doc, .docx) into well-organized Markdown using MinerU.
Pure documentation skill with no executable code; it only describes how to invoke a legitimate open-source CLI tool (mineru-open-api) to parse Word documents into Markdown.
Safe to install
No action needed. The skill is a thin documentation wrapper around the MinerU open-source CLI. Ensure the mineru-open-api binary is installed from the official npm/go sources before use.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | SKILL.md describes reading .doc/.docx files for parsing |
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md requires executing mineru-open-api CLI via Bash |
| Network | READ | READ | ✓ Aligned | SKILL.md documents URL-based document input and token API access |
2 findings
Medium External URL 外部 URL
https://mineru.net SKILL.md:4 Medium External URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:45 File Tree
1 files · 3.4 KB · 60 lines Markdown 1f · 60L
└─
SKILL.md
Markdown
Security Positives
✓ Only one file present (SKILL.md); no executable scripts, no hidden code
✓ No base64, eval, or obfuscated instructions found
✓ No credential harvesting, exfiltration, or reverse shell behavior
✓ Tool (mineru-open-api) is a documented open-source project by Shanghai AI Lab / OpenDataLab
✓ No sensitive path access (~/.ssh, ~/.aws, .env) detected
✓ External URLs point exclusively to legitimate MinerU domains