Is docx safe?
Grade A, 91/100. No meaningful risk found.
Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new documents, (2) Modifying or editing content, (3) Working with tracked changes, (4) Adding comments, or any other document tasks
Adocx
document-skills/docx91/100 · No meaningful risk found1 medium3 low
docx
document-skills/docxComprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new documents, (2) Modifying or editing content, (3) Working with tracked changes, (4) Adding comments, or any other document tasks
- Content hash
- sha256:2bf168974eb4b82e0885cffe0af1f8bf0b9ba450603a3517b2ba0d2b27620815
- Files
- 59
- Quality
- 100/100
Security findings
- mediumInstructions hidden in an HTML commentSL113 · document-skills/docx/ooxml.md:150
Font change - run level (specific to this text)Markdown renderers hide HTML comments from people, but agents still read them. Fix: Move the text into visible prose or delete it.
- lowRuns with elevated privilegesSL305 · document-skills/docx/SKILL.md:193
- **pandoc**: `sudo apt-get install pandoc` (for text extraction)The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command.
- lowRuns with elevated privilegesSL305 · document-skills/docx/SKILL.md:195
- **LibreOffice**: `sudo apt-get install libreoffice` (for PDF conversion)The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command.
- lowRuns with elevated privilegesSL305 · document-skills/docx/SKILL.md:196
- **Poppler**: `sudo apt-get install poppler-utils` (for pdftoppm to convert PDF to images)The skill uses sudo. Fix: Prefer user-level installs. If root is unavoidable, explain why next to the command.
Files in this skill
- LICENSE.txt1.4 KB
- SKILL.md9.9 KB
- docx-js.md16.1 KB
- ooxml.md23.0 KB
- ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd73.2 KB
- ooxml/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsd6.8 KB
- ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd50.1 KB
- ooxml/schemas/ISO-IEC29500-4_2016/dml-lockedCanvas.xsd624 B
- ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd148.5 KB
- ooxml/schemas/ISO-IEC29500-4_2016/dml-picture.xsd1.2 KB
- ooxml/schemas/ISO-IEC29500-4_2016/dml-spreadsheetDrawing.xsd8.7 KB
- ooxml/schemas/ISO-IEC29500-4_2016/dml-wordprocessingDrawing.xsd14.4 KB
- ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd81.7 KB
- ooxml/schemas/ISO-IEC29500-4_2016/shared-additionalCharacteristics.xsd1.2 KB
- ooxml/schemas/ISO-IEC29500-4_2016/shared-bibliography.xsd7.2 KB
- ooxml/schemas/ISO-IEC29500-4_2016/shared-commonSimpleTypes.xsd6.2 KB
- ooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlDataProperties.xsd1.2 KB
- ooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlSchemaProperties.xsd880 B
- ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesCustom.xsd2.5 KB
- ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesExtended.xsd3.4 KB
- ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesVariantTypes.xsd7.3 KB
- ooxml/schemas/ISO-IEC29500-4_2016/shared-math.xsd22.8 KB
- ooxml/schemas/ISO-IEC29500-4_2016/shared-relationshipReference.xsd1.3 KB
- ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd236.6 KB
- ooxml/schemas/ISO-IEC29500-4_2016/vml-main.xsd25.5 KB
- ooxml/schemas/ISO-IEC29500-4_2016/vml-officeDrawing.xsd24.7 KB
- ooxml/schemas/ISO-IEC29500-4_2016/vml-presentationDrawing.xsd535 B
- ooxml/schemas/ISO-IEC29500-4_2016/vml-spreadsheetDrawing.xsd5.6 KB
- ooxml/schemas/ISO-IEC29500-4_2016/vml-wordprocessingDrawing.xsd3.9 KB
- ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd167.4 KB
- ooxml/schemas/ISO-IEC29500-4_2016/xml.xsd4.5 KB
- ooxml/schemas/ecma/fouth-edition/opc-contentTypes.xsd1.9 KB
- ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd2.5 KB
- ooxml/schemas/ecma/fouth-edition/opc-digSig.xsd2.8 KB
- ooxml/schemas/ecma/fouth-edition/opc-relationships.xsd1.3 KB
- ooxml/schemas/mce/mc.xsd3.1 KB
- ooxml/schemas/microsoft/wml-2010.xsd25.9 KB
- ooxml/schemas/microsoft/wml-2012.xsd3.7 KB
- ooxml/schemas/microsoft/wml-2018.xsd901 B
- ooxml/schemas/microsoft/wml-cex-2018.xsd1.7 KB
- ooxml/schemas/microsoft/wml-cid-2016.xsd1002 B
- ooxml/schemas/microsoft/wml-sdtdatahash-2020.xsd600 B
- ooxml/schemas/microsoft/wml-symex-2015.xsd745 B
- ooxml/scripts/pack.py5.5 KB
- ooxml/scripts/unpack.py1.0 KB
- ooxml/scripts/validate.py1.9 KB
- ooxml/scripts/validation/__init__.py336 B
- ooxml/scripts/validation/base.py39.0 KB
- ooxml/scripts/validation/docx.py9.8 KB
- ooxml/scripts/validation/pptx.py12.0 KB
- ooxml/scripts/validation/redlining.py10.9 KB
- scripts/__init__.py65 B
- scripts/document.py49.2 KB
- scripts/utilities.py13.4 KB
- scripts/templates/comments.xml2.6 KB
- scripts/templates/commentsExtended.xml2.6 KB
- scripts/templates/commentsExtensible.xml2.7 KB
- scripts/templates/commentsIds.xml2.6 KB
- scripts/templates/people.xml147 B
Questions about docx
- Is docx safe to install?
- Our scanner gave docx grade A (91/100): no meaningful risk found. It matched 4 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
- How do I install docx in Claude Code or Codex?
- Run skillhash add github:ComposioHQ/awesome-claude-skills/document-skills/docx. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
- What happens if docx changes upstream?
- Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.
More from ComposioHQ/awesome-claude-skills
- A
abyssale-automation
77kComposioHQ/awesome-claude-skills
Automate Abyssale tasks via Rube MCP (Composio). Always search tools first for current schemas.
No security findings - A
brand-guidelines
77kComposioHQ/awesome-claude-skills
Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply.
No security findings - A
canvas-design
77kComposioHQ/awesome-claude-skills
Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art, design, or other static piece. Create original visual designs, never copying existing artists' work to avoid copyright violations.
No security findings - A
changelog-generator
77kComposioHQ/awesome-claude-skills
Automatically creates user-facing changelogs from git commits by analyzing commit history, categorizing changes, and transforming technical commits into clear, customer-friendly release notes. Turns hours of manual changelog writing into minutes of automated generation.
No security findings - A
competitive-ads-extractor
77kComposioHQ/awesome-claude-skills
Extracts and analyzes competitors' ads from ad libraries (Facebook, LinkedIn, etc.) to understand what messaging, problems, and creative approaches are working. Helps inspire and improve your own ad campaigns.
No security findings - A
-21risk-automation
77kComposioHQ/awesome-claude-skills
Automate 21risk tasks via Rube MCP (Composio). Always search tools first for current schemas.
No security findings - A
-2chat-automation
77kComposioHQ/awesome-claude-skills
Automate 2chat tasks via Rube MCP (Composio). Always search tools first for current schemas.
No security findings - A
ably-automation
77kComposioHQ/awesome-claude-skills
Automate Ably tasks via Rube MCP (Composio). Always search tools first for current schemas.
No security findings