Scan Report
5 /100
ppt-extract
Extract content from PowerPoint (.ppt, .pptx) presentations to Markdown using MinerU
This is a pure documentation skill (SKILL.md only) that describes how to use the legitimate open-source MinerU CLI tool for PowerPoint extraction. No execution code, scripts, or suspicious behavior present.
Safe to install
No action needed. This skill is a thin wrapper around a documented open-source CLI tool with no hidden functionality.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | SKILL.md: Only describes using mineru-open-api CLI which handles file reading |
| Network | READ | READ | ✓ Aligned | SKILL.md: Declares URL support for fetching remote .ppt files |
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md: Documents CLI command execution (bash/go install, mineru-open-api extr… |
| Environment | READ | READ | ✓ Aligned | SKILL.md: Declares MINERU_TOKEN environment variable usage |
2 findings
Medium External URL 外部 URL
https://mineru.net SKILL.md:4 Medium External URL 外部 URL
https://mineru.net/apiManage/token SKILL.md:42 File Tree
1 files · 2.7 KB · 58 lines Markdown 1f · 58L
└─
SKILL.md
Markdown
Security Positives
✓ Single-file skill with no hidden scripts or executables
✓ All external tool usage documented (mineru-open-api CLI)
✓ Legitimate open-source project (MinerU by OpenDataLab/Shanghai AI Lab)
✓ Token-based API authentication properly documented
✓ No credential harvesting beyond documented MINERU_TOKEN requirement
✓ No network exfiltration or suspicious external communication
✓ No base64 encoding, eval(), or obfuscated code patterns
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env)