扫描报告
10 /100
pptx-to-html
Convert PowerPoint (.pptx) presentations to HTML using MinerU
Documentation-only skill that wraps an external CLI tool (mineru-open-api) for PPTX-to-HTML conversion with all capabilities properly declared.
可以安装
Skill is safe to use. No code execution occurs through the skill itself; all work is delegated to the documented mineru-open-api CLI.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md:21 - reads .pptx files |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:22 - 'From URL' example shows network fetch |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:19 - executes mineru-open-api CLI |
| 环境变量 | READ | READ | ✓ 一致 | SKILL.md:29 - reads MINERU_TOKEN env var |
2 项发现
中危 外部 URL 外部 URL
https://mineru.net SKILL.md:4 中危 外部 URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:39 目录结构
1 文件 · 2.6 KB · 55 行 Markdown 1f · 55L
└─
SKILL.md
Markdown
依赖分析 1 项
| 包名 | 版本 | 来源 | 已知漏洞 | 备注 |
|---|---|---|---|---|
mineru-open-api | latest | npm/go | 否 | External CLI tool - user installs directly via standard package managers |
安全亮点
✓ Documentation-only skill with no executable code
✓ All capabilities (filesystem read, network fetch, shell execution) are properly declared in SKILL.md
✓ Uses standard package managers (npm/go) for external tool installation
✓ No hidden functionality or suspicious patterns detected
✓ No credential harvesting beyond the declared MINERU_TOKEN
✓ Open-source tool (MinerU by OpenDataLab) with verifiable provenance
✓ No base64 encoding, eval, or other obfuscation techniques