Skills minimax-docx
📦

minimax-docx

v1.0.0 Content revision r2 High Risk 🌐 Network access⚙️ External commands📁 Filesystem access

Create and Format DOCX Documents

Reliable Word document automation requires careful OpenXML structure and formatting. This skill provides CLI workflows, C# examples, previews, template application, and validation.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "minimax-docx" from https://skillstore.io/skills/minimax-ai-minimax-docx.md and its manifest at https://skillstore.io/api/skills/minimax-ai-minimax-docx/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "minimax-docx". Create a quarterly report with an A4 layout, title page, three sections, footer text, and page numbers.

Expected outcome:

A validated DOCX report with the requested page layout, structured headings, footer, page-number field, and editable body content.

Using "minimax-docx". Replace customer placeholders in an existing agreement and preserve its formatting.

Expected outcome:

  • A separate DOCX file containing the supplied customer values.
  • A validation result and a document comparison summary.

Using "minimax-docx". Apply the corporate template to a source report without changing its text.

Expected outcome:

A restyled DOCX file with copied template assets, preserved source content, and validation findings for any unsupported structure.

Security Audit

High Risk
v5 • 8/9/2026 Open versioned report

No malicious payload, prompt injection, or data-exfiltration intent was found in the reviewed files. Most static matches are OOXML syntax, documentation, or normal shell redirection. Setup still performs privileged installs, unverified remote-script execution, persistent configuration changes, and dependency builds. Static review was capped at 400/806 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

75
Files scanned
38,294
Lines analyzed
26
Review items
0
False positives ignored

Confirmed security concerns (4)

High
Unverified Download-and-Execute Installer
The Unix setup downloads a remote .NET installer into a predictable /tmp path and executes it without a checksum or signature check.
The download, chmod, and execution chain is explicit in both installer branches. No integrity verification appears between download and execution.
High
Overbroad Mandatory Activation Directive
The skill description demands activation for general reports, proposals, contracts, and any printable formal document, even when DOCX is not requested.
The activation language is explicit and materially broader than the skill's DOCX-specific functionality.
Medium
Environment Check Restores and Builds Dependencies
The required session check can restore NuGet packages and build the project, causing network and code-execution side effects beyond environment inspection.
The check explicitly runs dotnet restore and dotnet build when compiled output is absent.
Medium
Global NuGet Source Mutation
Setup adds nuget.org to the user's global NuGet sources when absent, changing persistent package-manager configuration without a dedicated opt-in.
The setup checks the user-level NuGet configuration and executes dotnet nuget add source when nuget.org is missing.
Capability review items (26)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
sudo privilege escalation
sudo apt-get update -qq
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
sudo apt-get install -y -qq wget apt-transport-https
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
sudo dnf install -y dotnet-sdk-8.0
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
sudo pacman -S --noconfirm dotnet-sdk
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
sudo zypper install -y dotnet-sdk-8.0
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
apt) sudo apt-get install -y -qq pandoc ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
dnf) sudo dnf install -y pandoc ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
pacman) sudo pacman -S --noconfirm pandoc ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
zypper) sudo zypper install -y pandoc ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
apt) sudo apt-get install -y -qq libreoffice-core ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
dnf) sudo dnf install -y libreoffice-core ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
pacman) sudo pacman -S --noconfirm libreoffice-still ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
zypper) sudo zypper install -y libreoffice ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
apt) sudo apt-get install -y -qq zip unzip ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
dnf) sudo dnf install -y zip unzip ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
pacman) sudo pacman -S --noconfirm zip unzip ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
sudo privilege escalation
zypper) sudo zypper install -y zip unzip ;;
The setup path executes a package-manager command with sudo and can change system software with elevated privileges.
High
Temp directory access
wget -q "https://dot.net/v1/dotnet-install.sh" -O /tmp/dotnet-install.sh
This line participates in downloading, marking executable, or running a remote installer from a predictable /tmp path without integrity verification.
High
Temp directory access
chmod +x /tmp/dotnet-install.sh
This line participates in downloading, marking executable, or running a remote installer from a predictable /tmp path without integrity verification.
High
Temp directory access
/tmp/dotnet-install.sh --channel 8.0 --install-dir "$HOME/.dotnet"
This line participates in downloading, marking executable, or running a remote installer from a predictable /tmp path without integrity verification.
High
Temp directory access
wget -q "https://dot.net/v1/dotnet-install.sh" -O /tmp/dotnet-install.sh || \
This line participates in downloading, marking executable, or running a remote installer from a predictable /tmp path without integrity verification.
High
Temp directory access
curl -sSL "https://dot.net/v1/dotnet-install.sh" -o /tmp/dotnet-install.sh
This line participates in downloading, marking executable, or running a remote installer from a predictable /tmp path without integrity verification.
High
Temp directory access
chmod +x /tmp/dotnet-install.sh
This line participates in downloading, marking executable, or running a remote installer from a predictable /tmp path without integrity verification.
High
Temp directory access
/tmp/dotnet-install.sh --channel 8.0 --install-dir "$HOME/.dotnet"
This line participates in downloading, marking executable, or running a remote installer from a predictable /tmp path without integrity verification.
Medium
Hidden file access
echo 'export PATH="$HOME/.dotnet:$PATH"' >> "$HOME/.bashrc"
The installer appends a PATH export to the user's .bashrc without deduplication or a separate opt-in, creating a persistent configuration change.
Medium
Hidden file access
echo 'export PATH="$HOME/.dotnet:$PATH"' >> "$HOME/.bashrc"
The installer appends a PATH export to the user's .bashrc without deduplication or a separate opt-in, creating a persistent configuration change.

Risk Factors

🌐 Network access (50)
assets/styles/academic_styles.xml:2 assets/styles/academic_styles.xml:3 assets/styles/academic_styles.xml:4 assets/styles/corporate_styles.xml:2 assets/styles/corporate_styles.xml:3 assets/styles/corporate_styles.xml:4 assets/styles/default_styles.xml:2 assets/styles/default_styles.xml:3 assets/styles/default_styles.xml:4 assets/xsd/aesthetic-rules.xsd:31 assets/xsd/aesthetic-rules.xsd:32 assets/xsd/business-rules.xsd:7 assets/xsd/business-rules.xsd:8 assets/xsd/common-types.xsd:5 assets/xsd/common-types.xsd:6 assets/xsd/wml-subset.xsd:6 assets/xsd/wml-subset.xsd:7 assets/xsd/wml-subset.xsd:8 assets/xsd/wml-subset.xsd:9 assets/xsd/wml-subset.xsd:12 assets/xsd/wml-subset.xsd:13 references/comments_guide.md:17 references/comments_guide.md:18 references/comments_guide.md:42 references/comments_guide.md:56 references/comments_guide.md:70 references/comments_guide.md:123 references/comments_guide.md:125 references/comments_guide.md:127 references/comments_guide.md:129 references/openxml_encyclopedia_part1.md:172 references/openxml_encyclopedia_part2.md:1700 references/openxml_encyclopedia_part2.md:2588 references/openxml_encyclopedia_part2.md:2599 references/openxml_encyclopedia_part2.md:2607 references/openxml_encyclopedia_part2.md:2615 references/openxml_encyclopedia_part2.md:2623 references/openxml_encyclopedia_part2.md:2633 references/openxml_encyclopedia_part2.md:2635 references/openxml_encyclopedia_part2.md:2777 references/openxml_encyclopedia_part3.md:719 references/openxml_encyclopedia_part3.md:1811 references/openxml_encyclopedia_part3.md:2040 references/openxml_encyclopedia_part3.md:2140 references/openxml_encyclopedia_part3.md:2226 references/openxml_encyclopedia_part3.md:2281 references/openxml_encyclopedia_part3.md:2291 references/openxml_encyclopedia_part3.md:2334 references/scenario_a_create.md:231 references/scenario_c_apply_template.md:338
⚙️ External commands (50)
📁 Filesystem access (50)
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/minimax-ai-minimax-docx/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/minimax-ai-minimax-docx/security.svg)](https://skillstore.io/skills/minimax-ai-minimax-docx?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/minimax-ai-minimax-docx?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/minimax-ai-minimax-docx/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/minimax-ai-minimax-docx.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

MiniMax-AI. (2026). minimax-docx security audit report (audit version 5) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/minimax-ai-minimax-docx/audits/5

BibTeX citation

@techreport{minimax-ai-minimax-ai-minimax-docx-2026, author = {MiniMax-AI}, title = {minimax-docx security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/minimax-ai-minimax-docx/audits/5}, note = {Author version 1.0.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "minimax-docx security audit report (audit version 5)" version: "1.0.0" type: report authors: - name: "MiniMax-AI" date-released: "2026-08-09" url: "https://skillstore.io/skills/minimax-ai-minimax-docx/audits/5" identifiers: - type: other value: "skillstore:minimax-ai-minimax-docx:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
82
Architecture
100
Maintainability
87
Content
79
Community
83
Spec Compliance

What You Can Build

Prepare recurring business documents

Create consistent reports, letters, and memos with approved page settings, headings, headers, footers, and reusable content.

Standardize existing Word files

Apply a reference template, preserve content, compare changes, and validate the resulting DOCX package.

Build structured academic manuscripts

Use documented OpenXML patterns for headings, citations, tables, sections, numbering, and multilingual typography.

Try These Prompts

Create a simple memo
Create a DOCX memo titled [TITLE] for [AUDIENCE]. Include [SECTIONS], a date, an author, and page numbers. Save it as [OUTPUT].
Update an existing document
Edit [INPUT DOCX]. Replace [OLD TEXT] with [NEW TEXT], fill [PLACEHOLDERS], preserve formatting, validate the result, and save it as [OUTPUT].
Apply a reference template
Format [SOURCE DOCX] with [TEMPLATE DOCX]. Preserve all source content, apply template styles and sections, run validation, compare both files, and save [OUTPUT].
Build a complex structured document
Create [DOCUMENT TYPE] from [CONTENT]. Use the relevant OpenXML samples for sections, tables, images, headings, and headers. Validate every write and deliver [OUTPUT].

Best Practices

  • Keep the original DOCX unchanged and write edits to a separate output file.
  • Preview and analyze input files before editing, then validate and compare every generated result.
  • Use the included samples for advanced OpenXML structures and test the final file in Microsoft Word.

Avoid

  • Do not run the full installer without reviewing its network, package-manager, and shell-configuration changes.
  • Do not copy direct formatting blindly when applying a template because it can override template styles.
  • Do not deliver complex DOCX output without validation, comparison, and a visual review.

Frequently Asked Questions

Which document formats are supported?
The main workflows create and modify DOCX files. Legacy DOC input requires LibreOffice conversion before editing.
Does the skill require Microsoft Word?
No. The CLI uses .NET and OpenXML. Microsoft Word is recommended for final visual inspection and field refresh.
Can it preserve an existing document layout?
Yes, for supported edits and template operations. Complex sections, embedded objects, and unusual extensions still require careful review.
Can it create tables and fill placeholders?
Yes. The CLI fills existing tables from CSV and replaces named placeholders from a mapping file.
How are generated files checked?
The tooling can analyze structure, validate OpenXML and business rules, repair element order, preview text, and compare document versions.
Does setup access the network or change the system?
Yes. Full setup can download .NET components, restore NuGet packages, install software, and modify shell configuration. Review it before running.

Developer Details

Author

MiniMax-AI

License

MIT

Author version

v1.0.0

Skillstore revision

r2

Version notice

The installable content changed, but the author did not update the declared version.

Ref

02be9409c79ca1183f7844009c14d9df684d0cf9

Maintenance freshness

8/11/2026

Usage

126 downloads · 405 views

File structure

📄 .gitignore

📁 assets/

📁 styles/

📄 academic_styles.xml

📄 corporate_styles.xml

📄 default_styles.xml

📁 xsd/

📄 aesthetic-rules.xsd

📄 business-rules.xsd

📄 common-types.xsd

📄 wml-subset.xsd

📄 LICENSE

📁 references/

📄 cjk_typography.md

📄 cjk_university_template_guide.md

📄 comments_guide.md

📄 design_good_bad_examples.md

📄 design_principles.md

📄 openxml_element_order.md

📄 openxml_encyclopedia_part1.md

📄 openxml_encyclopedia_part2.md

📄 openxml_encyclopedia_part3.md

📄 openxml_namespaces.md

📄 openxml_units.md

📄 scenario_a_create.md

📄 scenario_b_edit_content.md

📄 scenario_c_apply_template.md

📄 track_changes_guide.md

📄 troubleshooting.md

📄 typography_guide.md

📄 xsd_validation_guide.md

📁 scripts/

📄 doc_to_docx.sh

📄 docx_preview.sh

📁 dotnet/

📁 MiniMaxAIDocx.Cli/

📄 MiniMaxAIDocx.Cli.csproj

📄 Program.cs

📁 MiniMaxAIDocx.Core/

📁 Commands/

📄 AnalyzeCommand.cs

📄 ApplyTemplateCommand.cs

📄 CreateCommand.cs

📄 DiffCommand.cs

📄 EditContentCommand.cs

📄 FixOrderCommand.cs

📄 MergeRunsCommand.cs

📄 ValidateCommand.cs

📄 MiniMaxAIDocx.Core.csproj

📁 OpenXml/

📄 CommentSynchronizer.cs

📄 ElementOrder.cs

📄 NamespaceConstants.cs

📄 RunMerger.cs

📄 StyleAnalyzer.cs

📄 TrackChangesHelper.cs

📄 UnitConverter.cs

📁 Samples/

📄 AestheticRecipeSamples_Batch1.cs

📄 AestheticRecipeSamples_Batch2.cs

📄 AestheticRecipeSamples_Batch3.cs

📄 AestheticRecipeSamples_Batch4.cs

📄 AestheticRecipeSamples.cs

📄 CharacterFormattingSamples.cs

📄 DocumentCreationSamples.cs

📄 FieldAndTocSamples.cs

📄 FootnoteAndCommentSamples.cs

📄 HeaderFooterSamples.cs

📄 ImageSamples.cs

📄 ListAndNumberingSamples.cs

📄 ParagraphFormattingSamples.cs

📄 StyleSystemSamples.cs

📄 TableSamples.cs

📄 TrackChangesSamples.cs

📁 Typography/

📄 CjkHelper.cs

📄 FontDefaults.cs

📄 PageSizes.cs

📁 Validation/

📄 BusinessRuleValidator.cs

📄 GateCheckValidator.cs

📄 ValidationResult.cs

📄 XsdValidator.cs

📄 MiniMaxAIDocx.slnx

📄 env_check.sh

📄 setup.ps1

📄 setup.sh

📄 SKILL.md

More from MiniMax-AI

View all
View all