by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it simply wraps a third‑party CLI (mineru-open-api) and asks for the MinerU token for full analysis, which matches its described purpose.
评估建议
This skill acts as a wrapper for the mineru-open-api CLI and is coherent with its description. Before installing: (1) confirm you trust the npm package or the GitHub repo (inspect source or review release history); (2) be aware that using the authenticated 'extract' likely sends the presentation content to mineru.net — do not use it for sensitive slides unless you accept that upload; (3) prefer the tokenless 'flash-extract' for quick/local, small analyses when privacy is a concern; (4) keep your...详细分析 ▾
✓ 用途与能力
Name/description match what is requested: the skill requires the mineru-open-api CLI and (optionally) a MINERU_TOKEN for full analysis. Those requirements are proportionate to a MinerU-based PPTX analysis tool.
ℹ 指令范围
Runtime instructions only call the mineru-open-api binary on local files or URLs and describe auth via MINERU_TOKEN. This is appropriate, but the SKILL.md implies that full 'extract' uses the MinerU service (token + API) so files may be uploaded to mineru.net for processing — consider privacy implications. The quick 'flash-extract' is documented as tokenless and limited (10 MB / 20 pages).
ℹ 安装机制
Install methods are npm (mineru-open-api) or go install from a GitHub repo — both are standard distribution channels. These are reasonable but installing global npm binaries or go-installed CLIs runs third-party code on disk; verify the package source and review the CLI if you require stricter assurance.
✓ 凭证需求
Only MINERU_TOKEN is requested as an environment credential and is declared as the primary credential. That lines up with the documented need for an authenticated full 'extract' operation; no unrelated credentials are requested.
✓ 持久化与权限
The skill does not request always:true or other elevated platform privileges and is user-invocable. It does not modify other skills or system-wide settings according to provided metadata.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.4.02026/4/2
SEO: expand description for better ClawHub vector search discovery
● 无害
安装命令
点击复制官方npx clawhub@latest install pptx-analysis
镜像加速npx clawhub@latest install pptx-analysis --registry https://cn.longxiaskill.com镜像同步中