Trusted — Risk Score 5/100
Last scan:1 day ago Rescan
5 /100
pdf-to-docx
Convert PDF documents to Word (.docx) format using MinerU
Documentation-only skill that describes how to use an external CLI tool (mineru-open-api) for PDF to DOCX conversion with no embedded code or hidden functionality.
Skill Namepdf-to-docx
Duration28.4s
Enginepi
Safe to install
No action required. This skill is safe to use as it only contains documentation for a legitimate open-source tool.

Findings 1 items

Severity Finding Location
Info
External URL references
SKILL.md contains URLs to mineru.net for API token management. These point to the legitimate MinerU service from OpenDataLab (Shanghai AI Lab).
https://mineru.net
→ No action needed - URLs are to the official MinerU service
SKILL.md:4
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE SKILL.md does not declare any filesystem access; output is delegated to the exte…
Network NONE NONE SKILL.md does not declare network access; external calls are made by the mineru-…
Shell NONE NONE SKILL.md does not declare shell execution; user invokes CLI tool directly
Environment NONE NONE Requires MINERU_TOKEN env var but does not read other environment variables
2 findings
🔗
Medium External URL 外部 URL
https://mineru.net
SKILL.md:4
🔗
Medium External URL 外部 URL
https://mineru.net/apiManage/token:
SKILL.md:26

File Tree

1 files · 3.6 KB · 70 lines
Markdown 1f · 70L
└─ 📝 SKILL.md Markdown 70L · 3.6 KB

Security Positives

✓ No embedded code or scripts - purely documentation
✓ Open-source tool with verifiable repository (github.com/opendatalab/MinerU)
✓ No credential harvesting beyond the required MINERU_TOKEN for the service
✓ No base64, eval, or shell execution patterns
✓ No access to sensitive paths like ~/.ssh or .env
✓ No network calls made directly by the skill