Skills jstodocx-api

📦

jstodocx-api

Name: jstodocx-api
Author: daanaagua

Content revision r1 Safe 🌐 Network access🔑 Env variables⚙️ External commands

Generate DOCX Files with jstodocx API

Teams often need Word files from web content or structured fields without adding a local DOCX library. This skill guides Claude, Codex, and Claude Code through jstodocx.com API requests.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "jstodocx-api" from https://skillstore.io/skills/daanaagua-jstodocx-api.md and its manifest at https://skillstore.io/api/skills/daanaagua-jstodocx-api/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/daanaagua-jstodocx-api.md Signed manifest GET /api/skills/daanaagua-jstodocx-api/manifest Signed lockfile GET /api/skills/daanaagua-jstodocx-api/lockfile

Test it

Using "jstodocx-api". Convert a release plan from simple HTML into a Word document.

Expected outcome:

A saved release-plan.docx file with headings, paragraphs, emphasis, and a short task list.

Using "jstodocx-api". Create an invoice using client details, payment terms, and line items.

Expected outcome:

A downloadable invoice DOCX with a heading, summary paragraph, item table, and footer note.

Using "jstodocx-api". Archive JavaScript source text for stakeholder review.

Expected outcome:

A Word document containing the source as readable text with optional line numbers.

Security Audit

Safe

v6 • 7/9/2026 Open versioned report

The skill is a transparent DOCX generation wrapper around the jstodocx.com API. I confirmed the intentional third-party network transfer as a low-risk privacy concern and found the API key, reconnaissance, and shell-execution alerts to be documentation false positives. No prompt injection or malicious intent was found in the reviewed files.

Files scanned

190

Lines analyzed

Review items

False positives ignored

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

references/api.md:6

Hardcoded URL

POST https://jstodocx.com/api/v1/docx

This is the documented third-party API endpoint, so using the skill sends document content to jstodocx.com. The behavior is intentional but creates a real network privacy and dependency risk.

Low

SKILL.md:18

Hardcoded URL

2. Send `POST https://jstodocx.com/api/v1/docx` with `content-type: application/json`.

The workflow explicitly directs requests to jstodocx.com, which transmits user document content to a third-party service. This is expected for the skill but remains a real network privacy risk.

Low

SKILL.md:34

Hardcoded URL

curl -X POST "https://jstodocx.com/api/v1/docx" \

The curl example posts to the external jstodocx.com endpoint. This is legitimate API usage, but users should understand that document content leaves the local environment.

Low

SKILL.md:47

Hardcoded URL

curl -X POST "https://jstodocx.com/api/v1/docx" \

The authenticated curl example posts content to the external jstodocx.com API. The network transfer is intentional but creates a privacy and service-dependency exposure.

Risk Factors

🌐 Network access (4)

references/api.md:6 SKILL.md:18 SKILL.md:34 SKILL.md:47

🔑 Env variables (3)

references/api.md:24 references/api.md:25 SKILL.md:49

⚙️ External commands (12)

SKILL.md:8 SKILL.md:15 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:25 SKILL.md:33-42 SKILL.md:42-46 SKILL.md:46-57

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/daanaagua-jstodocx-api/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/daanaagua-jstodocx-api/security.svg)](https://skillstore.io/skills/daanaagua-jstodocx-api?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/daanaagua-jstodocx-api?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/daanaagua-jstodocx-api/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/daanaagua-jstodocx-api.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

daanaagua. (2026). jstodocx-api security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/daanaagua-jstodocx-api/audits/6

BibTeX citation

@techreport{daanaagua-daanaagua-jstodocx-api-2026,
  author = {daanaagua},
  title = {jstodocx-api security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/daanaagua-jstodocx-api/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "jstodocx-api security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "daanaagua"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/daanaagua-jstodocx-api/audits/6"
identifiers:
  - type: other
    value: "skillstore:daanaagua-jstodocx-api:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create Client Documents

Generate proposal, invoice, or report DOCX files from structured fields for review and delivery.

Export Web Content

Turn simple HTML content into a Word document without installing a local document library.

Archive Source Text

Package JavaScript source as a readable Word document for audits, handoffs, or stakeholder review.

Try These Prompts

Create a Basic DOCX

Use jstodocx-api to create a DOCX titled Release Plan from my basic HTML content. Ask before sending any sensitive content.

Generate an Invoice

Use jstodocx-api to generate an invoice DOCX from these fields: client, line items, payment terms, and footer note.

Archive JavaScript Source

Use jstodocx-api to create a DOCX archive of this JavaScript source text with line numbers enabled.

Build and Verify Output

Use jstodocx-api to create the DOCX, save it with a clear filename, then verify content type, filename, and ZIP magic bytes.

Best Practices

Confirm user approval before sending confidential or regulated content to the API.
Use placeholders or environment variables for API keys, and never log credential values.
Verify response content type, filename, and ZIP magic bytes before sharing the DOCX.