Doc To HTML
v0.4.0Convert Word documents (.doc, .docx) to HTML using MinerU's document processing engine. Produces clean HTML output preserving document structure and formatti...
⭐ 0· 134·0 current·0 all-time
by@mzlzyca
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary (mineru-open-api), and required env var (MINERU_TOKEN) are consistent with a document-conversion CLI front-end. The requested items are expected for a MinerU-based converter and there are no unrelated credentials or binaries.
Instruction Scope
SKILL.md directs the agent to run the mineru-open-api CLI to convert local files (or URLs) and to authenticate with a token. It does not instruct arbitrary file reads, environment inspection beyond MINERU_TOKEN, or exfiltration to unexpected endpoints; output behavior (stdout/stderr) is documented.
Install Mechanism
Installers are standard: npm package mineru-open-api and a Go 'go install' from a GitHub path (opendatalab). This is proportional for a CLI tool, but the skill source is marked 'unknown' and global installs will place a binary on the system—verify the npm package identity and GitHub repository before installing.
Credentials
Only a single credential (MINERU_TOKEN) is required and declared as primaryEnv; that aligns with the CLI's documented need for an API token. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false and the skill does not request system-wide configuration changes or persistent elevated privileges. Installing the CLI creates a user-accessible binary, which is expected for this functionality.
Assessment
This skill is coherent: it invokes the MinerU CLI and needs one API token. Before installing, verify the mineru-open-api package and the referenced GitHub repo (opendatalab) to ensure they are the legitimate project, and confirm the npm package owner matches MinerU/OpenDataLab. Be aware that using the token typically uploads documents to the MinerU service for processing—do not send sensitive or private documents unless you trust the service and understand token scopes. Prefer creating an ephemeral or least-privilege token for the skill and rotate/revoke it when no longer needed.Like a lobster shell, security has layers — review code before you run it.
latestvk977zq0tmhen4jxe4my4xrnmt5844mdk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📄 Clawdis
Binsmineru-open-api
EnvMINERU_TOKEN
Primary envMINERU_TOKEN
Install
Install via npm
Bins: mineru-open-api
npm i -g mineru-open-apiInstall via go install
Bins: mineru-open-api