Ocr Document
v1.0.0OCR document extraction - extract text from scanned documents, photos, and images using OCR. Use when reading scanned PDFs, photographed pages, handwritten n...
⭐ 0· 240·0 current·0 all-time
by@tanis90
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (OCR extraction) aligns with the single required binary (mineru-open-api) and the listed install packages (npm/uv/go for mineru-open-api). No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to run mineru-open-api flash-extract on local files or URLs and to respond in the user's language. It explicitly states that documents are uploaded to MinerU's cloud for processing. The instructions do not attempt to read unrelated files or environment variables, but they do send user files off-host — which is necessary for the stated cloud OCR capability.
Install Mechanism
Installers are standard package mechanisms (npm, go install, 'uv' entry provided). These are moderate-risk installs because they fetch and install third-party code that will create a binary. The go package references a GitHub repo that matches the MinerU/Ecosystem naming; the npm package name matches the binary. No raw download-from-IP or shortener URLs are used in SKILL.md.
Credentials
No environment variables, secrets, or unrelated credentials are requested. The lack of required credentials is consistent with the SKILL.md claim that no API key is required.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide configuration. It requires installing a CLI binary which will live on disk, but this is proportional to its functionality.
Assessment
This skill appears internally consistent for cloud-based OCR, but it uploads whatever you OCR to MinerU's servers with no authentication. Before installing or using it: (1) avoid sending sensitive or regulated data (PII, financial, health, legal) unless you trust MinerU; (2) review mineru.net, the npm package and the GitHub repo referenced by the go install to confirm authenticity and reputation; (3) if you need local-only processing, prefer an OCR tool that runs entirely locally; (4) when installing, verify package sources and checksums where available. Confidence is medium because this is an instruction-only skill relying on an external binary we cannot inspect here.Like a lobster shell, security has layers — review code before you run it.
latestvk974jkxtvbkszb04yq8xt5whas83gwrm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔍 Clawdis
Binsmineru-open-api
Install
Install via npm
Bins: mineru-open-api
npm i -g mineru-open-apiInstall via uv
Bins: mineru-open-api
uv tool install mineru-open-apiInstall via go install
Bins: mineru-open-api