Parse PowerPoint (.pptx) presentations into structured Markdown using MinerU. Analyzes slide content and preserves document hierarchy for downstream processi...
Security Analysis
high confidenceThe skill is internally consistent: it delegates PPTX parsing to the mineru-open-api binary and only requires the MINERU_TOKEN for the documented full-parse path.
Name/description (PPTX parsing) match the declared dependency (mineru-open-api CLI). The required binary and the MINERU_TOKEN credential align with the stated functionality (flash-extract vs extract).
SKILL.md instructs running the mineru-open-api CLI on local files or URLs and documents when a token is required. It does not instruct reading unrelated system files or accessing unrelated credentials.
Install uses an npm package or a Go 'go install' from a GitHub repo. These are typical for a CLI but carry the usual supply-chain risk of third-party packages; no arbitrary URL downloads or extract-from-unknown-host patterns are present.
Only MINERU_TOKEN is required and is documented as needed for the full 'extract' operation; this is proportionate to a service-backed parser. No unrelated secrets or multiple credentials are requested.
Skill is not always-enabled and does not request elevated or cross-skill configuration. Autonomous invocation is allowed (default) but is normal and not combined with other red flags.
Guidance
This skill appears to do what it says: it runs the mineru-open-api CLI to parse PPTX files and needs MINERU_TOKEN only for the full 'extract' flow. Before installing, verify the mineru-open-api package/source (npm package page and the GitHub repo linked in the docs), confirm the token creation endpoint is legitimate (https://mineru.net), and review the CLI's privacy policy or source code if you need to parse sensitive slides (to confirm whether data is sent to a remote API). Treat MINERU_TOKEN like any API secret—grant minimal privileges, rotate if exposed, and consider running the CLI in a sandboxed environment until you’re comfortable with its behavior.
Latest Release
v0.4.0
SEO: expand description for better ClawHub vector search discovery
More by @mzlzyca
Published by @mzlzyca on ClawHub
