扫描报告
0 /100
doc-analysis
Analyze the structure, layout, and content of Word documents (.doc, .docx) using MinerU. Returns structured Markdown with headings, paragraphs, tables, and layout information preserved.
The skill is a pure documentation wrapper for the mineru-open-api CLI tool, with no implementation files, scripts, or hidden functionality — all declared capabilities are appropriate for document analysis.
可以安装
This skill is safe to use. No further security action required.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md:27 — mineru-open-api extract report.docx reads local .doc/.docx files |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:28 — 'local file or URL' supported; mineru-open-api POSTs to https://mi… |
| 环境变量 | READ | READ | ✓ 一致 | SKILL.md:4 — metadata.requires.env=['MINERU_TOKEN']; SKILL.md:38 — export MINERU… |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:30 — mineru-open-api extract ... -o ./out/ writes output files |
| 技能调用 | NONE | NONE | — | No nested skill invocation declared or observed |
| 剪贴板 | NONE | NONE | — | No clipboard access mentioned |
| 浏览器 | NONE | NONE | — | No browser access mentioned |
| 数据库 | NONE | NONE | — | No database access mentioned |
2 项发现
中危 外部 URL 外部 URL
https://mineru.net SKILL.md:4 中危 外部 URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:42 目录结构
1 文件 · 3.1 KB · 57 行 Markdown 1f · 57L
└─
SKILL.md
Markdown
安全亮点
✓ Only one file exists (SKILL.md) — no hidden scripts or binaries
✓ All capabilities (filesystem:READ, network:READ, shell:WRITE, environment:READ) are fully declared and appropriate for document analysis
✓ No credential harvesting beyond the legitimate MINERU_TOKEN for API authentication
✓ No base64, eval, curl|bash, or other high-risk patterns present
✓ Skill is a thin documentation wrapper for a known open-source tool (MinerU by OpenDataLab/Shanghai AI Lab)
✓ No sensitive paths (.ssh, .aws, .env) are accessed
✓ Token management is standard CLI pattern (auth command or env var) — not exfiltrated