扫描报告
0 /100
table-ocr
OCR and extract tables from scanned PDFs and images using MinerU
Pure documentation skill with no executable code. All behavior properly declared - uses legitimate MinerU CLI tool for table OCR with declared MINERU_TOKEN authentication.
可以安装
No action needed. This skill is safe to use as it only provides documentation for a legitimate open-source OCR tool.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md documents reading PDF/image files |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md documents URL support |
| 环境变量 | READ | READ | ✓ 一致 | SKILL.md declares MINERU_TOKEN env var usage |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md documents CLI command execution |
2 项发现
中危 外部 URL 外部 URL
https://mineru.net SKILL.md:4 中危 外部 URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:39 目录结构
1 文件 · 3.1 KB · 55 行 Markdown 1f · 55L
└─
SKILL.md
Markdown
安全亮点
✓ No executable code present - purely documentation
✓ All external URLs (mineru.net) properly declared in documentation
✓ Uses legitimate open-source tool (MinerU by OpenDataLab/Shanghai AI Lab)
✓ All capabilities aligned between documentation and inferred behavior
✓ No credential harvesting or exfiltration patterns detected
✓ No base64, eval, or suspicious code execution patterns
✓ Token usage (MINERU_TOKEN) is for service authentication, properly documented