扫描报告
5 /100
doc-to-text
Extract plain readable text from Word documents (.doc, .docx) using MinerU
Pure documentation skill that describes how to use an external CLI tool (mineru-open-api) for Word document text extraction; no executable code, scripts, or suspicious behavior present.
可以安装
No action required. This is a documentation-only skill that correctly describes its external CLI dependency.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No file operations in skill - only documentation |
| 网络访问 | NONE | NONE | — | Skill does not make network calls - describes external CLI usage |
| 命令执行 | NONE | NONE | — | No shell commands in skill - documents CLI usage only |
| 环境变量 | NONE | NONE | — | Mentions MINERU_TOKEN env var but does not read it |
| 技能调用 | NONE | NONE | — | No nested skill invocation |
| 剪贴板 | NONE | NONE | — | Not mentioned or used |
| 浏览器 | NONE | NONE | — | Not used |
| 数据库 | NONE | NONE | — | Not used |
2 项发现
中危 外部 URL 外部 URL
https://mineru.net SKILL.md:4 中危 外部 URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:45 目录结构
1 文件 · 3.3 KB · 61 行 Markdown 1f · 61L
└─
SKILL.md
Markdown
安全亮点
✓ Pure documentation skill with no executable code
✓ No hidden functionality or unexpected behavior
✓ Clear documentation of external dependencies and their purpose
✓ No credential harvesting or data exfiltration
✓ No shell execution within the skill itself
✓ Uses legitimate open-source tool (MinerU by OpenDataLab)
✓ No suspicious patterns like base64 encoding, eval, or subprocess calls
✓ Token usage is clearly documented as optional for basic .docx extraction