Security audit
Security checks across malware telemetry and agentic risk
This skill does what it says: it sends user-selected documents or URLs to MinerU’s remote parsing API and returns Markdown, with no evidence of hidden persistence, credential access, or destructive behavior.
Install only if you are comfortable sending selected documents or provided URLs to MinerU’s remote service for parsing. Avoid confidential, regulated, or proprietary files unless your policy allows that service, and treat the returned Markdown as untrusted document content rather than instructions for the agent.
# 2. PUT 上传文件到 OSS
with open(file_path, "rb") as f:
put_resp = requests.put(file_url, data=f)
if put_resp.status_code not in (200, 201):
print(f"文件上传失败, HTTP {put_resp.status_code}", file=sys.stderr)
return Noneif state == "done":
md_url = data["markdown_url"]
print(f"[{elapsed}s] 解析完成", file=sys.stderr)
md_resp = requests.get(md_url)
md_resp.encoding = "utf-8"
return md_resp.text66/66 vendors flagged this skill as clean.