扫描报告
0 /100
ppt-ocr
OCR for PowerPoint (.ppt, .pptx) presentations with scanned or image-embedded slides using MinerU
Documentation-only skill wrapping a legitimate open-source OCR tool (MinerU) with no executable code or malicious indicators.
可以安装
Safe to use. This is a documentation skill that describes how to use the mineru-open-api CLI tool. No executable code is present.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md:22 - reads .ppt/.pptx files for OCR |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:27 - can fetch from URLs |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:10-13 - npm/go install commands documented |
| 环境变量 | READ | READ | ✓ 一致 | SKILL.md:36 - reads MINERU_TOKEN env variable |
| 技能调用 | NONE | NONE | — | No cross-skill invocations declared or inferred |
| 剪贴板 | NONE | NONE | — | No clipboard access documented or inferred |
| 浏览器 | NONE | NONE | — | No browser automation documented or inferred |
| 数据库 | NONE | NONE | — | No database access documented or inferred |
2 项发现
中危 外部 URL 外部 URL
https://mineru.net SKILL.md:4 中危 外部 URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:39 目录结构
1 文件 · 2.6 KB · 55 行 Markdown 1f · 55L
└─
SKILL.md
Markdown
安全亮点
✓ Documentation-only skill with no executable code present
✓ MinerU is a legitimate open-source OCR project from Shanghai AI Lab
✓ All capabilities are clearly declared in SKILL.md
✓ No credential exfiltration - MINERU_TOKEN is used as input for API auth only
✓ No suspicious patterns: no base64, eval, curl|bash, or hidden functionality
✓ Tool installation is standard (npm/go install) and well-documented
✓ External URLs point only to the official MinerU service (mineru.net)