扫描报告
5 /100
pdf-analysis
Analyze the structure, layout, and content of PDF documents using MinerU
Pure documentation skill that describes a legitimate third-party PDF analysis CLI (MinerU) with no executable code, no hidden functionality, and no security violations.
可以安装
No action needed. This skill is a documentation-only wrapper for a known open-source PDF analysis tool.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in skill - only documents CLI output options |
| 网络访问 | NONE | NONE | — | Skill documents remote URL input but makes no direct network calls itself |
| 命令执行 | NONE | NONE | — | No shell execution in skill - only documents CLI commands for user reference |
| 环境变量 | NONE | NONE | — | Documents MINERU_TOKEN env var but does not access it |
2 项发现
中危 外部 URL 外部 URL
https://mineru.net SKILL.md:4 中危 外部 URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:48 目录结构
1 文件 · 3.3 KB · 63 行 Markdown 1f · 63L
└─
SKILL.md
Markdown
安全亮点
✓ No executable code present - skill is documentation-only (SKILL.md)
✓ No hidden functionality or undocumented behavior
✓ References legitimate open-source project (MinerU by OpenDataLab/Shanghai AI Lab)
✓ No credential harvesting, data exfiltration, or suspicious API calls
✓ Full transparency about external service dependencies and token requirements
✓ No base64, eval, or obfuscated code patterns
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env)