ClawHub

Pdf2md

v1.0.0

PDF to Markdown converter - extract text, tables and formulas from PDF files to clean Markdown. Use when converting PDF documents, extracting PDF content, pa...

⭐ 0· 86·2 current·2 all-time
by@tanis90
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the requested binary and install instructions: mineru-open-api is the expected CLI for PDF->Markdown conversion. Required binaries and install packages are proportional to the stated purpose.
ℹ
Instruction Scope
SKILL.md only instructs the agent to run the mineru-open-api CLI on local files or URLs and explains that the CLI sends documents to mineru.net for processing. It does not ask the agent to read unrelated files or credentials. Important privacy note: documents are transmitted to an external API (no auth claimed), which may expose sensitive content.
ℹ
Install Mechanism
Install options are npm/uv/go (npm package 'mineru-open-api' and a GitHub go package). This is a typical third-party CLI install pattern but carries the usual risks of installing unreviewed packages from registries or GitHub; no arbitrary download-from-random-URL installers are present in the spec.
✓
Credentials
The skill declares no environment variables, no credentials, and no config paths. It does not request unrelated secrets or elevated access.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or modify other skills' configuration. Installing the CLI will place a binary on the system as expected.
Scan Findings in Context
[no_regex_findings] expected: The static regex scanner found no issues. This skill is instruction-only (SKILL.md) and has no code files for deeper static analysis; absence of findings is expected but not a proof of safety.
Assessment
This skill will upload any PDF you convert to mineru.net for processing. Before installing or sending sensitive documents: (1) review mineru.net and the mineru-open-api package source (npm/GitHub) to confirm authenticity, (2) avoid uploading confidential/PII documents unless you trust the service and its privacy terms, (3) consider running the CLI in a sandbox or network-restricted environment to inspect network activity, and (4) if you need offline conversion, use an entirely local tool instead. If you decide to install, verify the exact npm package name and the GitHub repo to avoid typosquatting.

Like a lobster shell, security has layers — review code before you run it.

latestvk9743t5bven3qbh4bcv20bbx5983gpzh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📄 Clawdis
Binsmineru-open-api

Install

Install via npm
Bins: mineru-open-api
npm i -g mineru-open-api
Install via uv
Bins: mineru-open-api
uv tool install mineru-open-api
Install via go install
Bins: mineru-open-api

Comments