mineru-pdf
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local command to process documents using the MinerU CLI.
- Evidence: The script
scripts/mineru_parse.shconstructs an argument array and executes the command viaenv "$threads_env=$threads" "$cmd" "${args[@]}". - File:
scripts/mineru_parse.sh - [PROMPT_INJECTION]: The skill processes untrusted PDF documents, creating an indirect prompt injection surface where document content could potentially influence agent behavior.
- Ingestion points: Local PDF file path provided to
scripts/mineru_parse.sh. - Boundary markers: Absent; the skill outputs raw Markdown and JSON files.
- Capability inventory: Shell command execution (
mineru) and local file system access. - Sanitization: Absent; the skill does not filter or sanitize the contents of the PDF documents.
Audit Metadata