扫描报告
5 /100
doc-to-html
Convert Word documents (.doc, .docx) to HTML using MinerU's document processing engine
A lightweight documentation-only skill for Word-to-HTML conversion using MinerU CLI. No executable code, no suspicious patterns, and all capabilities are accurately declared.
可以安装
This skill is safe to use. The skill is documentation-only with no embedded scripts. Users should ensure they install the mineru-open-api CLI from the official npm/Go repositories and protect their MINERU_TOKEN.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | SKILL.md - no file operations described |
| 网络访问 | NONE | NONE | — | SKILL.md - no direct network calls; external CLI handles API |
| 命令执行 | NONE | NONE | — | SKILL.md - no shell execution described; external CLI is user-installed |
| 环境变量 | NONE | NONE | — | SKILL.md - MINERU_TOKEN documented but not accessed by skill code |
| 技能调用 | NONE | NONE | — | SKILL.md - no skill-to-skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard operations |
| 浏览器 | NONE | NONE | — | No browser access |
| 数据库 | NONE | NONE | — | No database access |
2 项发现
中危 外部 URL 外部 URL
https://mineru.net SKILL.md:4 中危 外部 URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:42 目录结构
1 文件 · 2.8 KB · 56 行 Markdown 1f · 56L
└─
SKILL.md
Markdown
安全亮点
✓ Documentation-only skill with no executable code
✓ All capabilities are accurately declared in SKILL.md
✓ No hidden functionality or obfuscated instructions
✓ API token requirement is clearly documented
✓ Official sources (npm, Go) are referenced for tool installation
✓ Open-source project (MinerU) with transparent repository at github.com/opendatalab/MinerU
✓ No credential harvesting or data exfiltration patterns
✓ No suspicious patterns such as base64 encoding, eval(), or remote script execution