pdf-to-docx 安全扫描报告 — 可信 | ClawSafe

5 /100

pdf-to-docx

Convert PDF documents to Word (.docx) format using MinerU

Documentation-only skill that describes how to use an external CLI tool (mineru-open-api) for PDF to DOCX conversion with no embedded code or hidden functionality.

技能名称pdf-to-docx

分析耗时28.4s

引擎pi

✓

可以安装

No action required. This skill is safe to use as it only contains documentation for a legitimate open-source tool.

安全发现 1 项

严重性	安全发现	位置
提示	External URL references SKILL.md contains URLs to mineru.net for API token management. These point to the legitimate MinerU service from OpenDataLab (Shanghai AI Lab). `https://mineru.net` → No action needed - URLs are to the official MinerU service	`SKILL.md:4`

资源类型	声明权限	推断权限	状态	证据
文件系统	`NONE`	`NONE`	—	SKILL.md does not declare any filesystem access; output is delegated to the exte…
网络访问	`NONE`	`NONE`	—	SKILL.md does not declare network access; external calls are made by the mineru-…
命令执行	`NONE`	`NONE`	—	SKILL.md does not declare shell execution; user invokes CLI tool directly
环境变量	`NONE`	`NONE`	—	Requires MINERU_TOKEN env var but does not read other environment variables

2 项发现

🔗

中危外部 URL 外部 URL

https://mineru.net

SKILL.md:4

🔗

中危外部 URL 外部 URL

https://mineru.net/apiManage/token:

SKILL.md:26

目录结构

1 文件 · 3.6 KB · 70 行

Markdown 1f · 70L

└─ 📝 SKILL.md Markdown 70L · 3.6 KB

安全亮点

✓ No embedded code or scripts - purely documentation

✓ Open-source tool with verifiable repository (github.com/opendatalab/MinerU)

✓ No credential harvesting beyond the required MINERU_TOKEN for the service

✓ No base64, eval, or shell execution patterns

✓ No access to sensitive paths like ~/.ssh or .env

✓ No network calls made directly by the skill