📦

docx

Name: docx
Author: sickn33

Content revision r1 Safe 🌐 Network access📁 Filesystem access⚙️ External commands

Create and Edit Word Documents

Professional DOCX work often requires preserving formatting, comments, and tracked changes. This skill guides Claude, Codex, and Claude Code through reliable Word document workflows.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "docx" from https://skillstore.io/skills/sickn33-docx.md and its manifest at https://skillstore.io/api/skills/sickn33-docx/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-docx.md Signed manifest GET /api/skills/sickn33-docx/manifest Signed lockfile GET /api/skills/sickn33-docx/lockfile

Test it

Using "docx". Extract a summary from a contract DOCX with tracked changes.

Expected outcome:

A Markdown version of the document, a concise section summary, and a list of visible insertions, deletions, and comments.

Using "docx". Create a quarterly report as a Word document.

Expected outcome:

A styled DOCX report with title page, headings, tables, image placeholders, headers, footers, and clean page breaks.

Using "docx". Revise a policy document with tracked changes.

Expected outcome:

A reviewed DOCX that keeps original text visible, marks replacements precisely, adds reviewer comments, and passes validation checks.

Security Audit

Safe

v6 • 7/21/2026 Open versioned report

Four archive extraction calls accept Office ZIP contents without validating member paths, creating a high-confidence Zip Slip risk for untrusted files. The remaining reviewed static matches are false positives from OOXML schemas, XML templates, documentation, or bounded local document tooling. No prompt-injection, credential-exfiltration, or covert network behavior was found in the reviewed evidence. Static review was capped at 400/450 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Files scanned

24,725

Lines analyzed

Review items

False positives ignored

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

ooxml/scripts/unpack.py:17

Archive extract all (zip slip risk)

zipfile.ZipFile(input_file).extractall(output_path)

The code calls ZipFile.extractall on a user-selected Office archive without validating member paths. A crafted archive can write outside the intended extraction directory.

High

ooxml/scripts/validation/base.py:891

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code calls ZipFile.extractall on a user-selected Office archive without validating member paths. A crafted archive can write outside the intended extraction directory.

High

ooxml/scripts/validation/docx.py:201

Archive extract all (zip slip risk)

zip_ref.extractall(temp_dir)

The code calls ZipFile.extractall on a user-selected Office archive without validating member paths. A crafted archive can write outside the intended extraction directory.

High

ooxml/scripts/validation/redlining.py:70

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code calls ZipFile.extractall on a user-selected Office archive without validating member paths. A crafted archive can write outside the intended extraction directory.

Risk Factors

🌐 Network access (50)

📁 Filesystem access (50)

⚙️ External commands (49)

ooxml/scripts/pack.py:103 ooxml/scripts/validation/redlining.py:153 ooxml/scripts/validation/redlining.py:185 SKILL.md:36-40 SKILL.md:40-46 SKILL.md:46-49 SKILL.md:49-50 SKILL.md:50-51 SKILL.md:51-52 SKILL.md:52 SKILL.md:59-68 SKILL.md:68-69 SKILL.md:69-71 SKILL.md:71-82 SKILL.md:82-85 SKILL.md:85-91 SKILL.md:91-96 SKILL.md:96-98 SKILL.md:98-116 SKILL.md:116-117 SKILL.md:117-132 SKILL.md:132 SKILL.md:134 SKILL.md:136-139 SKILL.md:139-141 SKILL.md:141-145 SKILL.md:145-147 SKILL.md:147-149 SKILL.md:149-152 SKILL.md:152-161 SKILL.md:161-163 SKILL.md:163-166 SKILL.md:166-168 SKILL.md:168-169 SKILL.md:169 SKILL.md:172-173 SKILL.md:173 SKILL.md:174 SKILL.md:175 SKILL.md:176-179 SKILL.md:179-181 SKILL.md:181-193 SKILL.md:193-194 SKILL.md:194-195 SKILL.md:195-196 SKILL.md:196-197 SKILL.md:193 SKILL.md:195 SKILL.md:196

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sickn33-docx/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-docx/security.svg)](https://skillstore.io/skills/sickn33-docx?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-docx?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-docx/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-docx.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). docx security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-docx/audits/6

BibTeX citation

@techreport{sickn33-sickn33-docx-2026,
  author = {sickn33},
  title = {docx security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/sickn33-docx/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "docx security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-21"
url: "https://skillstore.io/skills/sickn33-docx/audits/6"
identifiers:
  - type: other
    value: "skillstore:sickn33-docx:audit:6"
    description: "Skillstore immutable audit report identifier"

Compare variants

11 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

7Spade Recommended

7spade-docx

Skillstore Score 76

Evidence Confidence High

Skillstore usage 83

Updated

2026-09-09

ZhanlinCui

zhanlincui-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 657

Updated

2026-09-09

anthropics

docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 184

Updated

2026-09-09

Cam10001110101

cam10001110101-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 42

Updated

2026-09-09

ComposioHQ

composiohq-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 20

Updated

2026-09-09

sickn33 Current

sickn33-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 37

Updated

2026-09-09

K-Dense-AI

k-dense-ai-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 25

Updated

2026-09-09

davila7

davila7-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 14

Updated

2026-09-09

DYAI2025

dyai2025-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 12

Updated

2026-09-09

ArtemisAI

artemisai-docx

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 46

Updated

2026-09-09

Azeem-2

azeem-2-docx

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 13

Updated

2026-09-09

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Review contract revisions

Apply precise redlines, preserve unchanged text, and produce a document that reviewers can inspect in Word.

Build formatted reports

Create DOCX reports with headings, tables, images, headers, footers, and consistent styles.

Analyze submitted documents

Extract readable Markdown, inspect comments, and verify document structure before making edits.

Try These Prompts

Extract DOCX text

Use the docx skill to extract readable Markdown from [document path]. Preserve tracked change context and summarize the main sections.

Create a formatted document

Use the docx skill to create a professional Word document for [topic]. Include headings, lists, tables, and a consistent style.

Edit an existing DOCX

Use the docx skill to update [document path]. Make the requested edits, preserve formatting, validate the result, and list the changed sections.

Implement redlined review

Use the docx redlining workflow for [document path]. Group changes by section, apply tracked insertions and deletions, add comments, and verify all edits.