Xlsx To Markdown

v1.0.0

Document to Markdown converter - convert DOCX, PPTX, Excel files to Markdown. Use when extracting content from Word documents, PowerPoint presentations, or E...

0· 121·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The name/description (convert DOCX/PPTX/XLSX to Markdown) matches the runtime instructions and the declared requirement of the mineru-open-api binary. The install specs (npm/go/uv) produce the mineru-open-api binary that the SKILL.md calls; nothing requested appears unrelated to the stated purpose.
Instruction Scope
The SKILL.md instructs using mineru-open-api flash-extract on local files or URLs, which is within scope. Important behavioral detail: flash-extract uploads documents to MinerU's cloud for processing (no API key required). This means user documents will be transmitted to a third party — expected for the skill's functionality, but a privacy/security consideration.
Install Mechanism
Installation options use npm and a 'go install' from a GitHub repo (and an unspecified 'uv' package manager). These are traceable sources (npm/GitHub) rather than arbitrary download URLs, but installing a CLI from third-party packages will execute code on the host and carries the usual supply-chain risk. No direct red flags like URL shorteners or personal IPs were used.
Credentials
The skill requests no environment variables or credentials (consistent with SKILL.md). However, the skill's operation uploads documents to a cloud endpoint without authentication — this is proportional for a cloud-conversion tool but materially affects confidentiality of uploaded files and should be considered before use.
Persistence & Privilege
The skill does not request always:true, does not claim to persist or modify other skills, and is user-invocable with normal autonomous invocation settings. It installs its own CLI binary but does not request system-wide privileged changes in the manifest.
Assessment
This skill is coherent for converting office files to Markdown, but take these precautions before installing or using it: (1) Understand that conversion uploads files to MinerU's cloud with no account or API key — do not upload sensitive or confidential documents unless you trust MinerU and have read their privacy policy. (2) Installing mineru-open-api via npm or go will run third-party code on your machine — inspect the package/repo (https://mineru.net and the linked GitHub repo) and review recent commits, owners, and issues. (3) Prefer running the CLI in a sandbox/container or on an isolated machine if you are unsure. (4) Verify package integrity where possible (checksums, repository tags). (5) If you need entirely local processing, consider local tools (pandoc, LibreOffice headless, python libraries like python-docx/mammoth) instead. (6) If you want higher privacy guarantees, ask the skill publisher about retention and deletion policies or use the CLI mode that requires auth for more controlled processing. If you provide additional artifacts (the mineru-open-api package link, GitHub repo contents, or the CLI binary), I can re-evaluate and raise the confidence level.

Like a lobster shell, security has layers — review code before you run it.

latestvk97eyd865cmmxwxgsm4vdn7qnx83ksjn

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📑 Clawdis
Binsmineru-open-api

Install

Install via npm
Bins: mineru-open-api
npm i -g mineru-open-api
Install via uv
Bins: mineru-open-api
uv tool install mineru-open-api
Install via go install
Bins: mineru-open-api

Comments