Word to MD

v0.2.0

Convert Word documents (.docx, .doc) to clean Markdown using the MinerU API. This skill uses mineru-open-api CLI to transform Word files into well-formatted...

0· 30·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name and description claim Word->Markdown conversion via the MinerU API/CLI, and the SKILL.md exclusively instructs installing and running the mineru-open-api CLI for that purpose. The requested operations (install npm CLI, run flash-extract/extract on input files) are coherent with the stated purpose.
Instruction Scope
Instructions tell the agent to globally install an npm CLI and run mineru-open-api commands on user-supplied .doc/.docx files. The SKILL.md does not instruct reading unrelated system files. Important: the CLI calls imply uploading user documents to MinerU's service (flash-extract/extract), which the skill does not explicitly warn about beyond a brief tip — this is a privacy/data-transmission consideration rather than an incoherence with purpose.
Install Mechanism
There is no registry install spec, but the instructions require `npm install -g mineru-open-api`. Installing a third-party npm package globally is a reasonable way to get a CLI, but it carries the usual moderate risk: npm packages may run install scripts and execute arbitrary code. The SKILL.md does not provide a trusted source URL or repository to audit the package.
Credentials
The skill declares no required environment variables, and the CLI supports a token for precision extraction. The SKILL.md mentions a token is required for some features and links to mineru.net for token management but does not declare or describe how tokens should be provided or stored. Requesting an optional service token is proportionate, but missing guidance on secure handling of that credential is a gap.
Persistence & Privilege
The skill does not request always:true, does not claim persistent system modifications, and is user-invocable. No privileged or persistent configuration changes are requested in the SKILL.md.
Assessment
This skill appears to do what it says: convert Word docs to Markdown using the MinerU CLI. Before installing and using it, consider the following: 1) The SKILL.md asks you to run `npm install -g mineru-open-api` — installing an unknown global npm package runs code on your machine (including install scripts). Prefer to inspect the package repository or install in an isolated environment (container or VM) first. 2) The conversion commands likely upload your documents to MinerU’s servers (flash-extract/extract). Do not upload sensitive or confidential documents until you verify MinerU’s privacy policy and trustworthiness. 3) Precision extraction may require a token — the skill does not declare how to supply/store that token; if you provide one, keep it secret and use secure storage. 4) Verify the mineru-open-api package source (GitHub repo, publisher) and mineru.net ownership before trusting the tool. A safe test is to run conversion on a non-sensitive sample file first.

Like a lobster shell, security has layers — review code before you run it.

convertvk97awww4ytw9hbnxq87nk7p7xn84ahrvdocvk97awww4ytw9hbnxq87nk7p7xn84ahrvdocumentvk97awww4ytw9hbnxq87nk7p7xn84ahrvdocxvk97awww4ytw9hbnxq87nk7p7xn84ahrvgithubvk97awww4ytw9hbnxq87nk7p7xn84ahrvlatestvk9751x82f3khesbt5zvsr24cqh84aazgmarkdownvk97awww4ytw9hbnxq87nk7p7xn84ahrvmigrationvk97awww4ytw9hbnxq87nk7p7xn84ahrvmineruvk97awww4ytw9hbnxq87nk7p7xn84ahrvofficevk97awww4ytw9hbnxq87nk7p7xn84ahrvtextvk97awww4ytw9hbnxq87nk7p7xn84ahrvwikivk97awww4ytw9hbnxq87nk7p7xn84ahrvwordvk97awww4ytw9hbnxq87nk7p7xn84ahrvwritingvk97awww4ytw9hbnxq87nk7p7xn84ahrv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments