ClawHub
Back to skill

Security audit

MinerU PDF Parser

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward guide for using MinerU’s cloud API to convert documents into Markdown, with the main caution that uploaded documents leave your environment.

Install this only if you are comfortable sending document URLs or files to MinerU for cloud processing. Do not use it with confidential, regulated, or proprietary material unless you have approval and have reviewed MinerU’s privacy and retention terms. Keep MINERU_TOKEN out of shared logs, repositories, and screenshots.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs users to submit document URLs/files to a third-party API and to upload files via presigned URLs, but it does not clearly warn that document contents will leave the local environment or describe privacy/data-handling implications. This is risky because users may process sensitive documents under the false impression that this is a local parsing workflow.

External Transmission

Medium
Category
Data Exfiltration
Content
cd "./paper-reading/[CVPR 2025] NewPaper"

# 2. 提交解析任务
TASK_ID=$(curl -s -X POST "https://mineru.net/api/v4/extract/task" \
  -H "Authorization: Bearer $MINERU_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://arxiv.org/pdf/XXXX.XXXXX"}' | jq -r '.task_id')
Confidence
89% confidence
Finding
curl -s -X POST "https://mineru.net/api/v4/extract/task" \ -H "Authorization: Bearer $MINERU_TOKEN" \ -H "Content-Type: application/json" \ -d

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.