Doc To Markdown
v0.4.0Convert Word documents (.doc, .docx) to clean, well-structured Markdown using MinerU's document processing engine. Ideal for turning Microsoft Word files int...
⭐ 0· 186·0 current·0 all-time
by@mzlzyca
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Doc To Markdown) align with required binary (mineru-open-api) and the declared MINERU_TOKEN. The install targets (npm package and a GitHub Go package) match the stated MinerU tool.
Instruction Scope
SKILL.md only instructs using the mineru-open-api CLI and the MINERU_TOKEN for .doc extraction. It does reference local files and URLs (expected). One behavioral note: conversions are performed by MinerU's engine (network calls/upload of document content to the MinerU service) — this is expected but relevant for sensitive documents.
Install Mechanism
Install options are via npm (mineru-open-api) or go install from a GitHub repo. Both are standard mechanisms and the Go package points to a GitHub path that matches the stated project (OpenDataLab). No arbitrary download URLs or opaque extract steps.
Credentials
Only MINERU_TOKEN is required (and documented as required only for .doc extraction). There are no unrelated credentials or excessive environment access requested.
Persistence & Privilege
Skill is not always-on and is user-invocable. It does not request system-wide config paths or modify other skills. Autonomous invocation is allowed by default but that is expected for skills and not a red flag here.
Assessment
This skill appears to do what it says, but it uses an external MinerU service: document contents (and any token you provide) may be sent to mineru.net during conversion. Before installing, verify the npm package author and the GitHub repo (github.com/opendatalab/MinerU-Ecosystem) to ensure the CLI matches the published source. Treat MINERU_TOKEN like any secret: create a least-privilege/ephemeral token if possible, store it securely, and avoid uploading highly sensitive documents until you’ve reviewed MinerU’s privacy/security policy. If you need offline conversion, look for a purely local tool instead.Like a lobster shell, security has layers — review code before you run it.
latestvk974r3wqr000fxhzr76xx0qyh1845q4r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📄 Clawdis
Binsmineru-open-api
EnvMINERU_TOKEN
Primary envMINERU_TOKEN
Install
Install via npm
Bins: mineru-open-api
npm i -g mineru-open-apiInstall via go install
Bins: mineru-open-api