PDF Analysis

This skill appears coherent, but before installing: 1) Confirm the mineru-open-api package source (npm and the GitHub repo) are official and review their README/source so you know whether processing is local or sent to mineru.net. 2) Treat MINERU_TOKEN like any credential: only provide it if you accept that PDFs may be uploaded to the MinerU service; check token scope and storage location used by the CLI. 3) For sensitive documents, prefer local/offline processing or validate that the tool supports fully local extraction; avoid using the 'extract' mode if it uploads data. 4) Install the CLI from the official project pages, inspect what files the installer creates, and run it in a sandbox if possible. 5) Be cautious when running interactive auth in shared environments since tokens are often persisted to disk — locate and audit that config file if needed.