Read and generate Word documents with correct structure, styles, and cross-platform compatibility.
Security Analysis
high confidenceThe skill is an instruction-only DOCX reference: its requirements and instructions match its stated purpose and it asks for no credentials or installs.
The name/description (read/generate DOCX) align with the SKILL.md content, which is a detailed reference on DOCX internals. The skill requests no binaries, env vars, or install artifacts — proportionate for a documentation-only helper.
SKILL.md contains purely descriptive guidance about DOCX structure, styles, fields, lists, headers/footers, track changes, compatibility, and pitfalls. It does not instruct the agent to read arbitrary system files, access external endpoints, or exfiltrate data.
No install spec and no code files are present. Being instruction-only means nothing is written to disk or downloaded by the skill itself — lowest-risk install posture.
The skill declares no required environment variables, credentials, or config paths. That is appropriate for a documentation/reference skill and there are no hidden env accesses in the SKILL.md.
The skill is not always-enabled and does not request persistent elevated privileges or modify other skills or system settings. Autonomous invocation is allowed by default but is not combined with other concerning factors here.
Guidance
This skill is a text-only DOCX reference and appears internally consistent and low-risk: it doesn't install code or ask for secrets. However, the publisher and homepage are unknown — if you plan to let the agent process real documents, avoid supplying sensitive documents unless you trust the agent environment. Also be aware of macro-bearing DOCM files (SKILL.md notes macros are a security risk) — do not enable or execute macros from untrusted documents. If you need programmatic DOCX handling, expect the agent to require external libraries/tools (this SKILL.md does not provide code), so verify what runtime the agent will use before allowing automated processing of private files.
Latest Release
v1.0.0
Initial release
More by @ivangdavila
Published by @ivangdavila on ClawHub
