{"data":{"skill":{"slug":"k-dense-ai-docx","name":"docx","icon":"📦","repo":"https://github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/document-skills/docx","status":"approved","author":"K-Dense-AI","authorVersion":null,"skillstoreRevision":null},"audit":{"id":"ba9c5ac1-9926-4cd6-b394-5d3032533e45","skill_id":"33ee9b5e-bd7b-44c8-a6b1-797e97424628","version":4,"content_hash":"7ecc9a1d17aa94478c542183e4bbbbfd","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":null,"manual_install_policy":null,"summary":"This is a legitimate document processing skill with no security concerns. All 1146 static findings are false positives: documentation code blocks (pandoc, soffice commands), OOXML schema namespace URLs, and XML attribute names misidentified as crypto/C2 patterns. The code uses safe XML parsing (defusedxml) to prevent XXE attacks.","remediation":[],"risk_factor_evidence":[{"factor":"filesystem","evidence":[{"file":"scripts/utilities.py","line_end":38,"line_start":37},{"file":"scripts/document.py","line_end":36,"line_start":36},{"file":"ooxml/scripts/unpack.py","line_end":30,"line_start":1}]},{"factor":"network","evidence":[{"file":"LICENSE.txt","line_end":9,"line_start":8},{"file":"ooxml/schemas/microsoft/wml-2012.xsd","line_end":5,"line_start":1}]},{"factor":"scripts","evidence":[{"file":"ooxml/scripts/pack.py","line_end":160,"line_start":1},{"file":"ooxml/scripts/validation/base.py","line_end":100,"line_start":1}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":61,"total_lines":25568,"audit_model":"claude","audited_at":"2026-01-17T06:51:02.483+00:00","created_at":"2026-01-21T01:53:03.220159+00:00","static_findings":[],"finding_verdicts":[],"semantic_findings":[],"subject_marketplace_commit_sha":null,"subject_content_hash":null,"subject_tree_hash":null,"subject_plugin_path":null,"audit_payload_hash":null,"confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":null,"contentHash":null,"treeHash":null,"pluginPath":null,"auditPayloadHash":null},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"canonical install advisories are incomplete"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":null,"manualInstallPolicy":null,"artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":false}}