📦

docx

Name: docx
Author: K-Dense-AI

Content revision r1 Safe 🌐 Network access📁 Filesystem access⚙️ External commands

Create and Review Word Documents

Manual DOCX editing is slow and can break OOXML structure. This skill guides creation, extraction, tracked changes, comments, and validation for Word documents.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "docx" from https://skillstore.io/skills/k-dense-ai-docx.md and its manifest at https://skillstore.io/api/skills/k-dense-ai-docx/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/k-dense-ai-docx.md Signed manifest GET /api/skills/k-dense-ai-docx/manifest Signed lockfile GET /api/skills/k-dense-ai-docx/lockfile

Test it

Using "docx". Create a meeting agenda document with attendees, decisions, and next steps.

Expected outcome:

A DOCX file is created with a clear title and three organized sections.
The document includes bullet lists for attendees, decisions, and next steps.
The final file is ready for review in Microsoft Word.

Using "docx". Review a policy document and mark one sentence replacement as tracked changes.

Expected outcome:

The original sentence remains visible as a tracked deletion.
The replacement text appears as a tracked insertion.
The document passes a validation check before delivery.

Using "docx". Extract a DOCX file to Markdown for quick review.

Expected outcome:

The document text is converted into Markdown headings and paragraphs.
Tracked changes are preserved in the review output.
The result is suitable for text comparison and summary work.

Security Audit

Safe

v9 • 7/21/2026 Open versioned report

The review confirmed four unsafe ZIP extraction calls that can permit Zip Slip when processing a crafted Office archive. The remaining static matches are false positives from OOXML namespaces, templates, documentation, or local document-processing operations; no prompt injection, credential theft, or network exfiltration was found. Static review was capped at 400/460 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Files scanned

24,993

Lines analyzed

Review items

False positives ignored

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

ooxml/scripts/unpack.py:17

Archive extract all (zip slip risk)

zipfile.ZipFile(input_file).extractall(output_path)

The code calls ZipFile.extractall on a supplied Office archive without validating member paths. A crafted archive can write files outside the intended extraction directory.

High

ooxml/scripts/validation/base.py:891

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code calls ZipFile.extractall on a supplied Office archive without validating member paths. A crafted archive can write files outside the intended extraction directory.

High

ooxml/scripts/validation/docx.py:201

Archive extract all (zip slip risk)

zip_ref.extractall(temp_dir)

The code calls ZipFile.extractall on a supplied Office archive without validating member paths. A crafted archive can write files outside the intended extraction directory.

High

ooxml/scripts/validation/redlining.py:70

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code calls ZipFile.extractall on a supplied Office archive without validating member paths. A crafted archive can write files outside the intended extraction directory.

Risk Factors

🌐 Network access (50)

📁 Filesystem access (50)

⚙️ External commands (50)

evaluation.json:69 evaluation.json:72 ooxml/scripts/pack.py:103 ooxml/scripts/validation/redlining.py:153 ooxml/scripts/validation/redlining.py:185 SKILL.md:25-27 SKILL.md:27-70 SKILL.md:70-74 SKILL.md:74-80 SKILL.md:80-83 SKILL.md:83-84 SKILL.md:84-85 SKILL.md:85-86 SKILL.md:86 SKILL.md:93-102 SKILL.md:102-103 SKILL.md:103-105 SKILL.md:105-116 SKILL.md:116-119 SKILL.md:119-125 SKILL.md:125-130 SKILL.md:130-132 SKILL.md:132-150 SKILL.md:150-151 SKILL.md:151-166 SKILL.md:166 SKILL.md:168 SKILL.md:170-173 SKILL.md:173-175 SKILL.md:175-179 SKILL.md:179-181 SKILL.md:181-183 SKILL.md:183-186 SKILL.md:186-195 SKILL.md:195-197 SKILL.md:197-200 SKILL.md:200-202 SKILL.md:202-203 SKILL.md:203 SKILL.md:206-207 SKILL.md:207 SKILL.md:208 SKILL.md:209 SKILL.md:210-213 SKILL.md:213-215 SKILL.md:215-227 SKILL.md:227-228 SKILL.md:228-229 SKILL.md:229-230 SKILL.md:230-231

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/k-dense-ai-docx/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/k-dense-ai-docx/security.svg)](https://skillstore.io/skills/k-dense-ai-docx?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/k-dense-ai-docx?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/k-dense-ai-docx/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/k-dense-ai-docx.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

K-Dense-AI. (2026). docx security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/k-dense-ai-docx/audits/9

BibTeX citation

@techreport{k-dense-ai-k-dense-ai-docx-2026,
  author = {K-Dense-AI},
  title = {docx security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/k-dense-ai-docx/audits/9},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "docx security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
  - name: "K-Dense-AI"
date-released: "2026-07-21"
url: "https://skillstore.io/skills/k-dense-ai-docx/audits/9"
identifiers:
  - type: other
    value: "skillstore:k-dense-ai-docx:audit:9"
    description: "Skillstore immutable audit report identifier"

Compare variants

11 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

7Spade Recommended

7spade-docx

Skillstore Score 76

Evidence Confidence High

Skillstore usage 76

Updated

2026-08-21

ZhanlinCui

zhanlincui-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 653

Updated

2026-08-21

anthropics

docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 181

Updated

2026-08-21

Cam10001110101

cam10001110101-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 41

Updated

2026-08-21

ComposioHQ

composiohq-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 18

Updated

2026-08-21

sickn33

sickn33-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 35

Updated

2026-08-21

K-Dense-AI Current

k-dense-ai-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 24

Updated

2026-08-21

davila7

davila7-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

DYAI2025

dyai2025-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

ArtemisAI

artemisai-docx

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 41

Updated

2026-08-21

Azeem-2

azeem-2-docx

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 12

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prepare Technical Reports

Create structured Word reports with headings, lists, tables, and embedded images.

Review Contracts With Changes

Apply precise edits with tracked insertions, deletions, comments, and validation steps.

Automate Document Processing

Extract text, inspect XML, modify repeated content, and repack documents programmatically.

Try These Prompts

Create a Basic Document

Create a DOCX named project-brief.docx with a title, three section headings, and short placeholder paragraphs.

Extract Review Text

Extract the text from proposal.docx into Markdown and preserve tracked changes for review.

Apply Tracked Edits

Edit agreement.docx with tracked changes. Replace the notice period from 30 days to 60 days and add one reviewer comment.

Validate Complex OOXML

Inspect contract.docx at the OOXML level, fix broken comment relationships, repack the file, and validate the result.

Best Practices

Use tracked changes when editing documents that other people own or review.
Validate the document after XML edits and before sharing the final DOCX file.
Keep a backup of the original document before unpacking or repacking it.

Avoid

Do not edit raw OOXML without checking namespaces, relationships, and content types.
Do not run privileged dependency installation commands without explicit user approval.
Do not extract untrusted Office archives without validating every archive member path.

Frequently Asked Questions

Can this skill create new Word documents?

Yes. It documents a docx-js workflow for creating DOCX files with paragraphs, text runs, images, and layout elements.

Can it edit existing DOCX files?

Yes. It provides OOXML workflows and a Python document helper for comments, tracked changes, relationships, and settings.

Does it preserve tracked changes?

It includes workflows for reading, creating, and validating tracked insertions and deletions in WordprocessingML.

What tools may be required?

Some workflows use pandoc, LibreOffice, Poppler, the docx npm package, Python, and XML validation libraries.

Can it process encrypted documents?

No. The documented workflows do not support password-protected or encrypted Word documents.

Is it safe to use with untrusted DOCX files?

Use caution. DOCX files are ZIP archives, so safe extraction and validation controls are needed before processing untrusted files.

Developer Details

Author

K-Dense-AI

License

Proprietary. LICENSE.txt has complete terms

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/document-skills/docx

Ref

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

Maintenance freshness

7/21/2026

Usage

21 downloads · 297 views

File structure

📁 ooxml/

📁 schemas/

📁 ecma/

📁 fouth-edition/

📁 ISO-IEC29500-4_2016/

📄 dml-chart.xsd

📄 dml-chartDrawing.xsd

📄 dml-diagram.xsd

📄 dml-lockedCanvas.xsd

📄 dml-main.xsd

📄 dml-picture.xsd

📄 dml-spreadsheetDrawing.xsd

📄 dml-wordprocessingDrawing.xsd

📄 pml.xsd

📄 shared-additionalCharacteristics.xsd

📄 shared-bibliography.xsd

📄 shared-commonSimpleTypes.xsd

📄 shared-customXmlDataProperties.xsd

📄 shared-customXmlSchemaProperties.xsd

📄 shared-documentPropertiesCustom.xsd

📄 shared-documentPropertiesExtended.xsd

📄 shared-documentPropertiesVariantTypes.xsd

📄 shared-math.xsd

📄 shared-relationshipReference.xsd

📄 sml.xsd

📄 vml-main.xsd

📄 vml-officeDrawing.xsd

📄 vml-presentationDrawing.xsd

📄 vml-spreadsheetDrawing.xsd

📄 vml-wordprocessingDrawing.xsd

📄 wml.xsd

📄 xml.xsd

📁 mce/

📄 mc.xsd

📁 microsoft/

📄 wml-2010.xsd

📄 wml-2012.xsd

📄 wml-2018.xsd

📄 wml-cex-2018.xsd

📄 wml-cid-2016.xsd

📄 wml-sdtdatahash-2020.xsd

📄 wml-symex-2015.xsd

📁 scripts/

📁 validation/

📄 __init__.py

📄 base.py

📄 docx.py

📄 pptx.py

📄 redlining.py

📄 pack.py

📄 unpack.py

📄 validate.py

📁 scripts/

📁 templates/

📄 comments.xml

📄 commentsExtended.xml

📄 commentsExtensible.xml

📄 commentsIds.xml

📄 people.xml

📄 __init__.py

📄 document.py

📄 utilities.py

📄 docx-js.md

📄 evaluation.json

📄 LICENSE.txt

📄 ooxml.md

📄 SKILL.md

More from K-Dense-AI

View all

📦

venue-templates

Prepare Academic Venue Submissions

Academic submissions often fail because formatting rules vary by venue. This skill provides templates, requirements, and examples for faster preparation.

Research & Learning View

📦

iso-13485-certification

Prepare ISO 13485 Certification Docs

Medical device teams must create complete QMS documentation before certification audits. This skill provides templates, checklists, and gap analysis guidance for ISO 13485 readiness.

Documentation View

📦

pytdc

Analyze therapeutic ML datasets with PyTDC

Drug discovery teams need reliable datasets and fair evaluation protocols. This skill helps Claude use PyTDC for curated therapeutic ML data, benchmark splits, metrics, and molecular oracles.

Data & Analytics View

📦

diffdock

Run DiffDock Molecular Docking

Protein-ligand docking requires careful setup, parameter choices, and result interpretation. This skill guides DiffDock workflows for poses, confidence scores, and screening.

Research & Learning View

📦

statistical-analysis

Analyze Research Data with Statistical Guidance

Choosing tests and reporting results can be slow and error-prone. This skill guides test selection, assumptions, effect sizes, power analysis, Bayesian options, and APA reporting.

Data & Analytics View

📦

scanpy

Analyze Single-Cell RNA-seq with Scanpy

Single-cell RNA-seq analysis requires many linked decisions across QC, normalization, clustering, and plotting. This skill gives Claude, Codex, and Claude Code structured Scanpy workflows, reference guidance, and reusable analysis scripts.

Data & Analytics View

View all

📦

jstodocx-api

Generate DOCX Files with jstodocx API

by daanaagua

Teams often need Word files from web content or structured fields without adding a local DOCX library. This skill guides Claude, Codex, and Claude Code through jstodocx.com API requests.

Office & Reports View

📦

docx-official

Create and Edit Word Documents

by sickn33

Reliable Word files require careful handling of formatting, OOXML, and tracked changes. This skill provides workflows for creation, editing, validation, and visual review.

Office & Reports View

📦

pptx-official

Create and Edit PowerPoint Presentations

by sickn33

PowerPoint work is difficult when slides need layout, XML, or template changes. This skill guides Claude, Codex, and Claude Code through PPTX creation, editing, validation, and review.

Office & Reports View

📦

working-with-documents

Create and Transform Office Documents

by Asmayaseen

Office document workflows often require different libraries and conversion tools. This skill provides focused instructions for DOCX, PDF, and PPTX tasks.

Office & Reports View

📦

minimax-docx

Create and Format DOCX Documents

by MiniMax-AI

Reliable Word document automation requires careful OpenXML structure and formatting. This skill provides CLI workflows, C# examples, previews, template application, and validation.

Office & Reports View

📦

security-report

Create Security Assessment Reports

by BytR-Ecosystems

Security findings often become inconsistent reports that are difficult to prioritize. This skill guides structured DOCX reports with risk ratings, evidence, and remediation plans.

Security & Compliance View

docx

Install with my Agent

Agent-readable resources

Test it

Security Audit

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Prepare Technical Reports

Review Contracts With Changes

Automate Document Processing

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from K-Dense-AI

venue-templates

iso-13485-certification

pytdc

diffdock

statistical-analysis

scanpy

Related Skills

jstodocx-api

docx-official

pptx-official

working-with-documents

minimax-docx

security-report