mineru

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
skills/mineru/SKILL.md

SUSPICIOUS: The core purpose is coherent for a PDF parsing skill, and the single API token requirement is proportionate. However, the skill's actual execution path depends on an undocumented local script whose provenance is unclear and does not align with the official MinerU CLI/install docs, so install trust is only partially verifiable.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:23 PM
Package URL
pkg:socket/skills-sh/nebutra%2Fmineru-skill%2Fmineru%2F@3da9ef86d986e36ee7692765badab763f9bedeb5