📦

docx

Name: docx
Author: 7Spade

Content revision r1 Safe 🌐 Network access📁 Filesystem access⚙️ External commands

Create and Edit Word Documents

Professional DOCX work often needs precise editing, tracked changes, comments, and structure preservation. This skill gives Claude, Codex, and Claude Code workflows for creating, inspecting, editing, and validating Word files.

Supports: Claude Codex Code(CC)

📊 76 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "docx" from https://skillstore.io/skills/7spade-docx.md and its manifest at https://skillstore.io/api/skills/7spade-docx/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/7spade-docx.md Signed manifest GET /api/skills/7spade-docx/manifest Signed lockfile GET /api/skills/7spade-docx/lockfile

Test it

Using "docx". A DOCX contract and a list of clause updates.

Expected outcome:

A revised DOCX with tracked insertions and deletions.
A short change summary grouped by section.
A validation note describing any unresolved formatting issues.

Using "docx". A request to generate a project status report.

Expected outcome:

A formatted Word document with headings, tables, and summary text.
A brief note listing assumptions used for the document structure.

Using "docx". A DOCX file that needs comment and media inspection.

Expected outcome:

A summary of comments, embedded media, relationships, and document metadata.
A list of files inside the DOCX package that need attention.

Security Audit

Safe

v8 • 7/9/2026 Open versioned report

Most static findings are false positives from OOXML namespace URLs, schema imports, Markdown command examples, and template XML. I confirmed unsafe ZIP extraction in document unpacking and validation helpers, plus sudo-based dependency installation guidance in SKILL.md. No prompt injection, credential exfiltration, or malicious network intent was found. Static review was capped at 400/450 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Files scanned

24,725

Lines analyzed

Review items

False positives ignored

Capability review items (7)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

ooxml/scripts/unpack.py:17

Archive extract all (zip slip risk)

zipfile.ZipFile(input_file).extractall(output_path)

The code extracts a user-supplied Office archive with ZipFile.extractall without validating member paths. A malicious DOCX/PPTX/ZIP package could write files outside the intended output directory.

High

ooxml/scripts/validation/base.py:891

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code extracts a user-supplied Office archive with ZipFile.extractall without validating member paths. A malicious DOCX/PPTX/ZIP package could write files outside the intended output directory.

High

ooxml/scripts/validation/docx.py:201

Archive extract all (zip slip risk)

zip_ref.extractall(temp_dir)

The code extracts a user-supplied Office archive with ZipFile.extractall without validating member paths. A malicious DOCX/PPTX/ZIP package could write files outside the intended output directory.

High

ooxml/scripts/validation/redlining.py:70

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code extracts a user-supplied Office archive with ZipFile.extractall without validating member paths. A malicious DOCX/PPTX/ZIP package could write files outside the intended output directory.

High

SKILL.md:193

sudo privilege escalation

- **pandoc**: `sudo apt-get install pandoc` (for text extraction)

The skill guidance tells the agent to install dependencies with sudo apt-get. That requests elevated privileges and can modify the host system outside the document workflow.

High

SKILL.md:195

sudo privilege escalation

- **LibreOffice**: `sudo apt-get install libreoffice` (for PDF conversion)

The skill guidance tells the agent to install dependencies with sudo apt-get. That requests elevated privileges and can modify the host system outside the document workflow.

High

SKILL.md:196

sudo privilege escalation

- **Poppler**: `sudo apt-get install poppler-utils` (for pdftoppm to convert PDF to images)

The skill guidance tells the agent to install dependencies with sudo apt-get. That requests elevated privileges and can modify the host system outside the document workflow.

Risk Factors

🌐 Network access (50)

📁 Filesystem access (50)

⚙️ External commands (49)

ooxml/scripts/pack.py:103 ooxml/scripts/validation/redlining.py:153 ooxml/scripts/validation/redlining.py:185 SKILL.md:36-40 SKILL.md:40-46 SKILL.md:46-49 SKILL.md:49-50 SKILL.md:50-51 SKILL.md:51-52 SKILL.md:52 SKILL.md:59-68 SKILL.md:68-69 SKILL.md:69-71 SKILL.md:71-82 SKILL.md:82-85 SKILL.md:85-91 SKILL.md:91-96 SKILL.md:96-98 SKILL.md:98-116 SKILL.md:116-117 SKILL.md:117-132 SKILL.md:132 SKILL.md:134 SKILL.md:136-139 SKILL.md:139-141 SKILL.md:141-145 SKILL.md:145-147 SKILL.md:147-149 SKILL.md:149-152 SKILL.md:152-161 SKILL.md:161-163 SKILL.md:163-166 SKILL.md:166-168 SKILL.md:168-169 SKILL.md:169 SKILL.md:172-173 SKILL.md:173 SKILL.md:174 SKILL.md:175 SKILL.md:176-179 SKILL.md:179-181 SKILL.md:181-193 SKILL.md:193-194 SKILL.md:194-195 SKILL.md:195-196 SKILL.md:196-197 SKILL.md:193 SKILL.md:195 SKILL.md:196

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/7spade-docx/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/7spade-docx/security.svg)](https://skillstore.io/skills/7spade-docx?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/7spade-docx?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/7spade-docx/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/7spade-docx.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

7Spade. (2026). docx security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/7spade-docx/audits/8

BibTeX citation

@techreport{7spade-7spade-docx-2026,
  author = {7Spade},
  title = {docx security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/7spade-docx/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "docx security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "7Spade"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/7spade-docx/audits/8"
identifiers:
  - type: other
    value: "skillstore:7spade-docx:audit:8"
    description: "Skillstore immutable audit report identifier"

Compare variants

11 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

7Spade Recommended Current

7spade-docx

Skillstore Score 76

Evidence Confidence High

Skillstore usage 76

Updated

2026-08-21

ZhanlinCui

zhanlincui-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 653

Updated

2026-08-21

anthropics

docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 181

Updated

2026-08-21

Cam10001110101

cam10001110101-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 41

Updated

2026-08-21

ComposioHQ

composiohq-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 18

Updated

2026-08-21

sickn33

sickn33-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 35

Updated

2026-08-21

K-Dense-AI

k-dense-ai-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 24

Updated

2026-08-21

davila7

davila7-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

DYAI2025

dyai2025-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

ArtemisAI

artemisai-docx

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 41

Updated

2026-08-21

Azeem-2

azeem-2-docx

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 12

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Review Contract Revisions

Plan and apply tracked changes to legal or business documents while preserving review history.

Generate Structured Reports

Create Word reports with headings, tables, images, headers, footers, and consistent styles.

Inspect Document Internals

Unpack a DOCX file to inspect XML, comments, relationships, media, and metadata.

Try These Prompts

Read a DOCX File

Extract the main text from this DOCX file. Preserve headings and note any tracked changes you can identify.

Create a New Document

Create a DOCX report with a title page, section headings, a summary table, and a short conclusion.

Add Review Comments

Review this DOCX draft and add comments on unclear claims, missing evidence, and formatting issues.

Apply Tracked Changes

Apply these requested edits as tracked changes. Group related edits, validate the result, and summarize each change made.

Best Practices

Work on copies of important documents and keep the original file unchanged.
Validate generated DOCX files before sharing them with reviewers or clients.
Use tracked changes for legal, academic, business, and government documents.

Avoid

Do not unpack untrusted DOCX files without safe ZIP path validation.
Do not replace entire paragraphs when only a few words changed.
Do not install system dependencies with elevated privileges from an automated agent session.