mineru

SUSPICIOUS. The core MinerU parsing path is largely coherent and routes data to official vendor endpoints, but the skill’s optional sink framework significantly broadens scope from document parsing into multi-service content delivery using many third-party credentials. That expanded data egress is disclosed rather than hidden, so this is not confirmed malware, but it is more than a simple parser and carries medium security risk.