Smart PDF Reader
v0.2.0Intelligent PDF reader and content extractor powered by MinerU API. Read and extract content from any PDF document including scanned files, academic papers,...
⭐ 0· 29·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description promise an extraction CLI powered by MinerU and the SKILL.md tells the agent to use the mineru-open-api CLI to run flash-extract or extract; the requested actions match the described capability (PDF extraction, OCR, tables, etc.).
Instruction Scope
Runtime instructions are narrowly scoped: install the CLI and run mineru-open-api commands on the provided PDF, then read/summarize the output. The SKILL.md references writing outputs to a per-skill directory in the user's home, which is consistent with its purpose and does not request unrelated files or env variables.
Install Mechanism
There is no formal install spec in the registry, but the SKILL.md instructs a global npm install (npm install -g mineru-open-api). Installing an arbitrary npm package globally is a moderate risk unless the package and publisher are verified. The package name appears plausible but the skill registry metadata lacks a homepage/source to validate the package.
Credentials
The skill declares no required environment variables or credentials and the SKILL.md notes a 'flash-extract' mode that needs 'no token'. However the description mentions 'MinerU API' and advanced extraction modes (OCR, formula detection) which in many integrations require API keys or account configuration; the absence of any declared creds is a minor inconsistency that should be validated with the MinerU package/service documentation.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request persistent system-level privileges or modify other skills. It writes output files to a skill-specific directory under the user's home, which is proportionate for a document extraction tool.
Assessment
This skill is coherent with its stated purpose, but take these precautions before you install or run it: 1) Verify the npm package 'mineru-open-api' and its publisher (check the npm page, GitHub repo, and README) before running npm install -g; global npm installs execute package install scripts and can modify your system. 2) Confirm whether MinerU requires API keys for the extraction modes you need—the skill doesn't declare any credentials. 3) Be aware the tool will write output files into your home directory (~/MinerU-Skill/...). If you need stronger isolation, run the CLI in a sandbox/container or with a dedicated user account. 4) If you handle sensitive PDFs, review the mineru-open-api privacy/transport policy to ensure document data isn't sent to an untrusted remote service. If you want, I can help look up the npm package and MinerU docs to validate them before you install.Like a lobster shell, security has layers — review code before you run it.
latestvk972fk05v06tpzakj3xvyykn1x84a7c5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.