Doc2md

Document to Markdown converter - convert DOCX, PPTX, Excel files to Markdown. Use when extracting content from Word documents, PowerPoint presentations, or E...

Security Scan

Doc2md is internally consistent: it wraps a third‑party CLI (mineru-open-api) to upload and convert office files to Markdown, but it uploads user documents to an external service without authentication — review privacy before use.

Purpose & Capability

The skill's name/description match its requirements: it requires the mineru-open-api CLI and its instructions call that CLI to convert DOCX/PPTX/XLSX to Markdown. The declared install methods (npm/uv/go) and the referenced GitHub repo align with a CLI distribution.

Instruction Scope

SKILL.md instructs the agent to run mineru-open-api flash-extract against local files or URLs; it does not ask the agent to read unrelated files or environment variables. However, the flash-extract operation uploads user documents to MinerU's cloud API (per the doc), and the skill therefore causes outbound transfer of potentially sensitive content. It also allows converting documents located by URL, which could cause the tool to fetch arbitrary network resources.

Install Mechanism

Installation is via npm/uv/go for a named package (mineru-open-api) or a GitHub go install. This is a typical distribution model but still executes third‑party code on the user's machine. No arbitrary download-from-random-URL installer is specified, which reduces but does not eliminate risk. Users should verify package provenance before installing.

Credentials

The skill requests no environment variables or credentials (proportionate), but it explicitly uploads documents to a third‑party cloud without requiring authentication. That low friction makes accidental or unwanted exfiltration easier — especially for sensitive files. The SKILL.md also claims documents are not stored after extraction; that is a vendor promise and not enforced by the skill itself.

Persistence & Privilege

The skill is not always-enabled and is user-invocable. It does not request persistent privileges, modify other skills, or require special platform flags. Autonomous invocation remains possible (default), but that is normal and not a sole reason for concern here.

Assessment

This skill appears to do what it says — it calls the mineru-open-api CLI to upload and convert documents to Markdown. Before installing or using it: (1) do not upload sensitive or confidential documents unless you trust mineru.net and have reviewed its privacy/storage policy, because flash-extract uploads files to a third-party endpoint without authentication; (2) verify the mineru-open-api package/repo provenance (npm/uv package name and the GitHub repo) before installing third‑party CLI software; (3) if you need offline processing, prefer an offline converter or run the CLI in a sandboxed environment; (4) be cautious about conversion requests that reference internal URLs (the tool may fetch arbitrary network resources). If you want a deeper assessment, provide the mineru-open-api package source (npm link or GitHub repo contents) so its code and network behavior can be reviewed.

Doc2MD - Quick Office Parser

Convert Word, PowerPoint, and Excel files to Markdown using MinerU Open API. No API key required.

Quick Start

# Doc2MD - Quick Office Parser
mineru-open-api flash-extract report.docx

# Doc2MD - Quick Office Parser
mineru-open-api flash-extract slides.pptx

# Doc2MD - Quick Office Parser
mineru-open-api flash-extract data.xlsx

# Doc2MD - Quick Office Parser
mineru-open-api flash-extract https://example.com/report.docx

# Doc2MD - Quick Office Parser
mineru-open-api flash-extract report.docx -o ./output/

Language Rule

You MUST reply to the user in the SAME language they use. This is non-negotiable.

Capabilities

• Converts DOCX, PPTX, XLS, XLSX to Markdown
• Supports both local files and URLs directly
• Preserves text, tables, and document structure
• No API key, no signup, no authentication
• Max 10MB / 20 pages per document

When to Use

• User asks to "read", "extract", or "convert" a Word/PowerPoint/Excel file
• User shares a .docx, .pptx, or .xlsx and asks for its content
• User wants to summarize or analyze an office document
• User needs document content in Markdown format

CLI Reference

Run mineru-open-api flash-extract --help for all available options.

Data Privacy

• flash-extract uploads the document to MinerU's cloud API for processing and returns the result. No account or API key is required.
• Documents are processed in real-time and are not stored after extraction.
• For details, see https://mineru.net

Notes

• Output is Markdown only; embedded images may be replaced with placeholders
• For larger files (up to 200MB/600 pages) or precision extraction, use mineru-open-api extract (requires auth via mineru-open-api auth)
• If the CLI cannot be installed via npm/uv/go, download it from https://mineru.net/ecosystem?tab=cli