Scan Report
0 /100
pdf-to-latex
Convert PDF documents to LaTeX source using MinerU
A legitimate PDF-to-LaTeX conversion skill using the open-source MinerU tool by OpenDataLab. No malicious behavior detected.
Safe to install
This skill is safe to use. Ensure MINERU_TOKEN is sourced from a trusted environment.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | Reads PDF files and writes LaTeX output |
| Shell | WRITE | WRITE | ✓ Aligned | Executes mineru-open-api CLI tool |
| Network | READ | READ | ✓ Aligned | Fetches PDFs from URLs and calls mineru.net API |
| Environment | READ | READ | ✓ Aligned | Reads MINERU_TOKEN for API authentication |
3 findings
Medium External URL 外部 URL
https://mineru.net SKILL.md:4 Medium External URL 外部 URL
https://arxiv.org/pdf/2309.10918 SKILL.md:30 Medium External URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:42 File Tree
1 files · 3.2 KB · 58 lines Markdown 1f · 58L
└─
SKILL.md
Markdown
Security Positives
✓ Open-source project from known legitimate organization (OpenDataLab/Shanghai AI Lab)
✓ All capabilities declared in SKILL.md - no hidden functionality
✓ External API usage (mineru.net) is necessary and declared for PDF extraction service
✓ Shell execution via CLI is documented and expected behavior
✓ No credential harvesting beyond required MINERU_TOKEN for the service
✓ URL fetching is limited to user-provided PDF sources (legitimate use case)