Scan Report
5 /100
doc-to-html
Convert Word documents (.doc, .docx) to HTML using MinerU's document processing engine
A lightweight documentation-only skill for Word-to-HTML conversion using MinerU CLI. No executable code, no suspicious patterns, and all capabilities are accurately declared.
Safe to install
This skill is safe to use. The skill is documentation-only with no embedded scripts. Users should ensure they install the mineru-open-api CLI from the official npm/Go repositories and protect their MINERU_TOKEN.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | SKILL.md - no file operations described |
| Network | NONE | NONE | — | SKILL.md - no direct network calls; external CLI handles API |
| Shell | NONE | NONE | — | SKILL.md - no shell execution described; external CLI is user-installed |
| Environment | NONE | NONE | — | SKILL.md - MINERU_TOKEN documented but not accessed by skill code |
| Skill Invoke | NONE | NONE | — | SKILL.md - no skill-to-skill invocation |
| Clipboard | NONE | NONE | — | No clipboard operations |
| Browser | NONE | NONE | — | No browser access |
| Database | NONE | NONE | — | No database access |
2 findings
Medium External URL 外部 URL
https://mineru.net SKILL.md:4 Medium External URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:42 File Tree
1 files · 2.8 KB · 56 lines Markdown 1f · 56L
└─
SKILL.md
Markdown
Security Positives
✓ Documentation-only skill with no executable code
✓ All capabilities are accurately declared in SKILL.md
✓ No hidden functionality or obfuscated instructions
✓ API token requirement is clearly documented
✓ Official sources (npm, Go) are referenced for tool installation
✓ Open-source project (MinerU) with transparent repository at github.com/opendatalab/MinerU
✓ No credential harvesting or data exfiltration patterns
✓ No suspicious patterns such as base64 encoding, eval(), or remote script execution