Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Academic Reader

v1.0.0

PDF to Markdown converter - extract text, tables and formulas from PDF files to clean Markdown. Use when converting PDF documents, extracting PDF content, pa...

0· 110·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tanis90/academic-reader.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Academic Reader" (tanis90/academic-reader) from ClawHub.
Skill page: https://clawhub.ai/tanis90/academic-reader
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: mineru-open-api
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install academic-reader

ClawHub CLI

Package manager switcher

npx clawhub@latest install academic-reader
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (PDF to Markdown converter) aligns with the declared binary (mineru-open-api) and the SKILL.md examples (mineru-open-api flash-extract). Required binaries and install methods are consistent with the stated purpose.
Instruction Scope
SKILL.md instructs using the mineru-open-api CLI to send local files or URLs to the MinerU service for extraction. It does not direct the agent to read unrelated files, environment variables, or system configuration. The documented data flow explicitly sends the document to mineru.net, which is consistent with a cloud-based extraction tool.
Install Mechanism
Installers are npm / uv / go package installs for a CLI named mineru-open-api. Using public package managers is typical but does involve executing third-party code on the host. No direct-download URLs or obscure hosts are used in the install spec, which lowers but does not eliminate install risk.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportional for a tool that claims 'no API key required.' The only sensitive action is uploading user-provided PDFs to an external API, which is justified by the stated functionality but has privacy implications.
Persistence & Privilege
always:false and no config paths or cross-skill config modifications are requested. The skill does not request permanent presence or elevated platform privileges beyond installing/using its CLI binary.
Assessment
This skill appears to do what it says, but it uploads documents to the MinerU API (mineru.net) for processing. Before installing or using it, avoid sending sensitive or confidential PDFs; verify the mineru-open-api package source (npm page and the GitHub repo referenced), inspect package contents or source code if possible, and install/run it in a controlled environment (or sandbox) if you have privacy concerns. Check the CLI's version, publisher, and checksum, and prefer an on-device extractor if you cannot accept external upload of your documents.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📄 Clawdis
Binsmineru-open-api

Install

Install via npm
Bins: mineru-open-api
npm i -g mineru-open-api
Install via uv
Bins: mineru-open-api
uv tool install mineru-open-api
Install via go install
Bins: mineru-open-api
latestvk976hwdvnkwtka8c3qy8g6m18d83g1nf
110downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Academic Reader - Scientific Paper Parser

Convert PDF files to clean Markdown using MinerU Open API. No API key required.

Quick Start

# Academic Reader - Scientific Paper Parser
mineru-open-api flash-extract report.pdf

# Academic Reader - Scientific Paper Parser
mineru-open-api flash-extract https://cdn-mineru.openxlab.org.cn/demo/example.pdf

# Academic Reader - Scientific Paper Parser
mineru-open-api flash-extract report.pdf -o ./output/

# Academic Reader - Scientific Paper Parser
mineru-open-api flash-extract report.pdf --pages 1-10

Language Rule

You MUST reply to the user in the SAME language they use. This is non-negotiable.

Capabilities

  • Extracts text, tables, and formulas from PDF
  • Supports both local files and URLs directly
  • Page range selection with --pages
  • Language hint with --language (default: ch, use en for English)
  • No API key, no signup, no authentication
  • Max 10MB / 20 pages per document

When to Use

  • User asks to "read", "extract", "convert", or "parse" a PDF
  • User shares a PDF file or PDF link and asks for its content
  • User wants to summarize or analyze a PDF document
  • User needs PDF content in Markdown format

CLI Reference

Run mineru-open-api flash-extract --help for all available options.

Data Flow

flash-extract sends the document to the MinerU API (mineru.net) for processing and returns Markdown. This is a stateless API call — no account, no persistent storage. MinerU is an open-source project by OpenDataLab (Shanghai AI Lab): https://github.com/opendatalab/MinerU

Notes

  • Output is Markdown only; images/tables/formulas may be replaced with placeholders
  • For larger files (up to 200MB/600 pages) or precision extraction with full assets, use mineru-open-api extract (requires auth via mineru-open-api auth)
  • If the CLI cannot be installed via npm/uv/go, download it from https://mineru.net/ecosystem?tab=cli

Comments

Loading comments...