Scan Report
0 /100
ppt-ocr
OCR for PowerPoint (.ppt, .pptx) presentations with scanned or image-embedded slides using MinerU
Documentation-only skill wrapping a legitimate open-source OCR tool (MinerU) with no executable code or malicious indicators.
Safe to install
Safe to use. This is a documentation skill that describes how to use the mineru-open-api CLI tool. No executable code is present.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | SKILL.md:22 - reads .ppt/.pptx files for OCR |
| Network | READ | READ | ✓ Aligned | SKILL.md:27 - can fetch from URLs |
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md:10-13 - npm/go install commands documented |
| Environment | READ | READ | ✓ Aligned | SKILL.md:36 - reads MINERU_TOKEN env variable |
| Skill Invoke | NONE | NONE | — | No cross-skill invocations declared or inferred |
| Clipboard | NONE | NONE | — | No clipboard access documented or inferred |
| Browser | NONE | NONE | — | No browser automation documented or inferred |
| Database | NONE | NONE | — | No database access documented or inferred |
2 findings
Medium External URL 外部 URL
https://mineru.net SKILL.md:4 Medium External URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:39 File Tree
1 files · 2.6 KB · 55 lines Markdown 1f · 55L
└─
SKILL.md
Markdown
Security Positives
✓ Documentation-only skill with no executable code present
✓ MinerU is a legitimate open-source OCR project from Shanghai AI Lab
✓ All capabilities are clearly declared in SKILL.md
✓ No credential exfiltration - MINERU_TOKEN is used as input for API auth only
✓ No suspicious patterns: no base64, eval, curl|bash, or hidden functionality
✓ Tool installation is standard (npm/go install) and well-documented
✓ External URLs point only to the official MinerU service (mineru.net)