mineru
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
AnomalyAnomalyskills/mineru/SKILL.md
LOWAnomalyLOW
skills/mineru/SKILL.md
SUSPICIOUS: The core purpose is coherent for a PDF parsing skill, and the single API token requirement is proportionate. However, the skill's actual execution path depends on an undocumented local script whose provenance is unclear and does not align with the official MinerU CLI/install docs, so install trust is only partially verifiable.
Confidence: 84%Severity: 52%
Audit Metadata