mineru-converter

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most URLs are benign (badges, official sites, and the upstream MinerU project), but several links point to an individual GitHub account/repository that packages a large prebuilt virtualenv/CLI inside the repo — GitHub repos from single/unknown accounts distributing bundled executables or large binary environments are a common malware distribution vector, so those links are potentially suspicious.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The SKILL.md explicitly instructs creating a symlink in /usr/local/bin (ln -s ... /usr/local/bin/mineru-cli), which modifies a system-level directory and may require elevated privileges to write, so it advises changing the machine's state.