Img2md

This skill is internally consistent: it runs a third-party CLI (mineru-open-api) to OCR images and uploads images to MinerU's cloud for processing. Before installing or using it, consider: (1) Privacy — images (including screenshots or photos with sensitive content) will be transmitted to an external service; avoid sending sensitive images unless you trust MinerU's policy. (2) Trust the CLI package — review the npm package and the GitHub repo (the go install target) or inspectorily inspect the installer before installing to ensure it is legitimate. (3) Runtime autonomy — the skill can be invoked by the agent by default; if you want to prevent unexpected uploads, restrict agent autonomy or only invoke the skill manually. (4) For batch or higher-precision workflows the SKILL.md mentions auth is available; treat any credentials you supply to that CLI as sensitive. If you want more assurance, request the upstream package source code or a checksum for the distributed binary before installing.