📦

docx

Name: docx
Author: ArtemisAI

Content revision r1 High Risk 🌐 Network access📁 Filesystem access⚙️ External commands

Edit and Review DOCX Documents

Professional Word documents often need precise edits, comments, tracked changes, and validation. This skill gives Claude structured workflows for DOCX creation, OOXML inspection, redlining, and conversion.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

This skill is part of a pack

Install the whole pack to get every skill the task needs, in one command.

Office Document Creator · 3 skills Install whole pack

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "docx" from https://skillstore.io/skills/artemisai-docx.md and its manifest at https://skillstore.io/api/skills/artemisai-docx/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/artemisai-docx.md Signed manifest GET /api/skills/artemisai-docx/manifest Signed lockfile GET /api/skills/artemisai-docx/lockfile

Test it

Using "docx". Review a contract and change payment terms from 30 days to 60 days with tracked changes.

Expected outcome:

A revised DOCX with a minimal tracked deletion for 30 and a tracked insertion for 60, plus a short verification summary.

Using "docx". Create a project status report from meeting notes and include a table of risks.

Expected outcome:

A formatted Word document with a title, executive summary, sections, bullet lists, and a risk table.

Using "docx". Find why a DOCX file fails to open after manual XML edits.

Expected outcome:

A diagnostic report identifying invalid OOXML structure, broken relationships, or malformed tracked-change markup.

Security Audit

High Risk

v11 • 7/9/2026 Open versioned report

The skill provides legitimate DOCX automation workflows, but several real risks remain: unsafe ZIP extraction, local filesystem mutation, external command execution, privileged installation instructions, and prompt-injection-like control language. Many network, schema URL, Markdown fence, and OOXML namespace matches are false positives because they are documentation or static schema metadata rather than executable behavior. Static review was capped at 400/450 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Files scanned

24,725

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (4)

High

ooxml/schemas/ecma/fouth-edition/opc-contentTypes.xsd:1

[HEURISTIC] Multiple bracket chains (7) - JSFuck/obfuscation pattern

(((([, ((([, ))((

The file begins with bracket-heavy junk before expected schema or Python content, which is not normal OOXML schema or validator syntax. This may be corruption or tampering and should block automatic trust.

High

ooxml/schemas/ecma/fouth-edition/opc-digSig.xsd:1

[HEURISTIC] Multiple bracket chains (8) - JSFuck/obfuscation pattern

)))), )))), ]))(((

High

ooxml/scripts/validation/redlining.py:1

[HEURISTIC] Multiple bracket chains (9) - JSFuck/obfuscation pattern

]}}}, ]}}}, ]}}}

High

SKILL.md:59 SKILL.md:68 SKILL.md:116-117

Prompt Injection-Like Instruction Pressure

SKILL.md repeatedly instructs the agent that it is mandatory to read entire files and never set range limits. This attempts to control tool usage and context management from inside untrusted skill content.

The wording uses mandatory and never directives to alter agent behavior rather than only describe document workflows. It is not a direct system override, but it is a strong prompt-injection-adjacent pattern.

Capability review items (32)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

ooxml/scripts/unpack.py:17

Archive extract all (zip slip risk)

zipfile.ZipFile(input_file).extractall(output_path)

The code calls ZipFile.extractall on an Office archive without visible member path validation. Malicious DOCX-style ZIP entries can write outside the intended output directory.

High

ooxml/scripts/validation/base.py:891

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code calls ZipFile.extractall on an Office archive without visible member path validation. Malicious DOCX-style ZIP entries can write outside the intended output directory.

High

ooxml/scripts/validation/docx.py:201

Archive extract all (zip slip risk)

zip_ref.extractall(temp_dir)

The code calls ZipFile.extractall on an Office archive without visible member path validation. Malicious DOCX-style ZIP entries can write outside the intended output directory.

High

ooxml/scripts/validation/redlining.py:70

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code calls ZipFile.extractall on an Office archive without visible member path validation. Malicious DOCX-style ZIP entries can write outside the intended output directory.

High

ooxml/scripts/validation/pptx.py:272

Path traversal sequence

normalized_target = target.replace("../", "")

The code removes ../ substrings from a relationship target, which is an incomplete path traversal mitigation. Encoded, absolute, or repeated traversal patterns may bypass simple replacement.

High

ooxml/scripts/pack.py:103

Python subprocess.run

result = subprocess.run(

The skill executes local conversion or diff commands through subprocess.run. Arguments appear mostly fixed, but external process execution on user documents is a real operational risk.

High

ooxml/scripts/validation/redlining.py:153

Python subprocess.run

result = subprocess.run(

The skill executes local conversion or diff commands through subprocess.run. Arguments appear mostly fixed, but external process execution on user documents is a real operational risk.

High

ooxml/scripts/validation/redlining.py:185

Python subprocess.run

result = subprocess.run(

The skill executes local conversion or diff commands through subprocess.run. Arguments appear mostly fixed, but external process execution on user documents is a real operational risk.

High

SKILL.md:193

sudo privilege escalation

- **pandoc**: `sudo apt-get install pandoc` (for text extraction)

The skill documentation instructs installing dependencies with sudo apt-get. Marketplace skills should not request privileged package installation without a clear user-controlled setup boundary.

High

SKILL.md:195

sudo privilege escalation

- **LibreOffice**: `sudo apt-get install libreoffice` (for PDF conversion)

The skill documentation instructs installing dependencies with sudo apt-get. Marketplace skills should not request privileged package installation without a clear user-controlled setup boundary.

High

SKILL.md:196

sudo privilege escalation

- **Poppler**: `sudo apt-get install poppler-utils` (for pdftoppm to convert PDF to images)

The skill documentation instructs installing dependencies with sudo apt-get. Marketplace skills should not request privileged package installation without a clear user-controlled setup boundary.

Medium

docx-js.md:20

Node.js fs operations

Packer.toBuffer(doc).then(buffer => fs.writeFileSync("doc.docx", buffer)); // Node.js

The documentation demonstrates synchronous local file reads and writes for DOCX generation. This is expected for document creation, but it still requires local file access permissions.

Medium

docx-js.md:265

Node.js fs operations

data: fs.readFileSync("image.png"),

The documentation demonstrates synchronous local file reads and writes for DOCX generation. This is expected for document creation, but it still requires local file access permissions.

Medium

ooxml/scripts/pack.py:76

Python archive libraries

with zipfile.ZipFile(output_file, "w", zipfile.ZIP_DEFLATED) as zf:

The packer writes a new Office ZIP from a caller-provided directory. This is intended functionality, but it can package unexpected local files if the input directory is not controlled.

Medium

ooxml/scripts/unpack.py:17

Python archive libraries

zipfile.ZipFile(input_file).extractall(output_path)

This archive library use participates in extracting Office ZIP contents from user-supplied files. Without explicit safe extraction, it supports the confirmed Zip Slip risk.

Medium

ooxml/scripts/validation/base.py:890

Python archive libraries

with zipfile.ZipFile(self.original_file, "r") as zip_ref:

This archive library use participates in extracting Office ZIP contents from user-supplied files. Without explicit safe extraction, it supports the confirmed Zip Slip risk.

Medium

ooxml/scripts/validation/docx.py:200

Python archive libraries

with zipfile.ZipFile(self.original_file, "r") as zip_ref:

This archive library use participates in extracting Office ZIP contents from user-supplied files. Without explicit safe extraction, it supports the confirmed Zip Slip risk.

Medium

ooxml/scripts/validation/redlining.py:69

Python archive libraries

with zipfile.ZipFile(self.original_docx, "r") as zip_ref:

This archive library use participates in extracting Office ZIP contents from user-supplied files. Without explicit safe extraction, it supports the confirmed Zip Slip risk.

Medium

ooxml/scripts/pack.py:154

Python file write/append

with open(xml_file, "wb") as f: