mineru-pdf

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). One URL (https://clawdhub.com/skill/mineru-pdf-parser-clawdbot-skill) points to a non-official/third-party domain (ClawdHub) that could be typosquatting or used to distribute binaries outside trusted channels, which is a high-risk indicator for malicious downloads.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow runs a local MinerU CLI to parse an input PDF whose extracted text/markdown/JSON is produced and therefore would be read into the agent context as free-form document content; since the PDF is provided by the user (not the skill author) it is an outsider-authored source.