安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears coherent for extracting .pptx files using the MinerU CLI, but check a few things before installing: 1) Verify the npm package (mineru-open-api) and the GitHub repo (opendatalab/MinerU-Ecosystem) to ensure they're the official project and review install scripts. 2) Understand that MINERU_TOKEN is needed for full 'extract' functionality but 'flash-extract' can run without a token — the registry metadata marking the token as required is inconsistent with the README. 3) Do not pas...详细分析 ▾
ℹ 用途与能力
The skill name/description (PPTX -> Markdown via MinerU) aligns with required binary (mineru-open-api) and the described commands. Minor incoherence: SKILL.md documents a no-token 'flash-extract' mode, but the registry metadata lists MINERU_TOKEN as a required env var/primary credential, which implies the token is mandatory even though the tool can operate in tokenless mode for quick extracts.
✓ 指令范围
Runtime instructions are narrowly scoped to running the mineru-open-api CLI (flash-extract, extract, auth) against local files or URLs. They do not instruct reading unrelated system files or other environment variables. It does call an interactive 'mineru-open-api auth' and references exporting MINERU_TOKEN.
ℹ 安装机制
Install paths are typical: npm package 'mineru-open-api' and a Go 'go install' from github.com/opendatalab. These are expected for a CLI tool, but npm installs run package scripts during install and Go installs pull code from GitHub — users should verify the npm package and GitHub repo before installing globally.
ℹ 凭证需求
Only MINERU_TOKEN is declared as the required credential, which matches the 'extract' and 'crawl' functionality. The metadata's blanket requirement of MINERU_TOKEN is inconsistent with the documented no-token 'flash-extract' mode; otherwise the requested credential is proportionate to the skill's purpose.
✓ 持久化与权限
The skill is not always-installed (always: false), requests no config paths, and does not ask to modify other skills or system settings. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.4.02026/4/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install pptx-extract
镜像加速npx clawhub@latest install pptx-extract --registry https://cn.longxiaskill.com 镜像可用