mineru-pdf

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local command to process documents using the MinerU CLI.
  • Evidence: The script scripts/mineru_parse.sh constructs an argument array and executes the command via env "$threads_env=$threads" "$cmd" "${args[@]}".
  • File: scripts/mineru_parse.sh
  • [PROMPT_INJECTION]: The skill processes untrusted PDF documents, creating an indirect prompt injection surface where document content could potentially influence agent behavior.
  • Ingestion points: Local PDF file path provided to scripts/mineru_parse.sh.
  • Boundary markers: Absent; the skill outputs raw Markdown and JSON files.
  • Capability inventory: Shell command execution (mineru) and local file system access.
  • Sanitization: Absent; the skill does not filter or sanitize the contents of the PDF documents.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 01:28 PM
Security Audit — agent-trust-hub — mineru-pdf