Skills docx-official
๐Ÿ“ฆ

docx-official

Content revision r2 Safe ๐ŸŒ Network access๐Ÿ“ Filesystem accessโš™๏ธ External commands

Create and Edit Word Documents

Reliable Word files require careful handling of formatting, OOXML, and tracked changes. This skill provides workflows for creation, editing, validation, and visual review.

Supports: Claude Codex Code(CC)
๐Ÿ“Š 75 Adequate

This skill is part of a pack

Install the whole pack to get every skill the task needs, in one command.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "docx-official" from https://skillstore.io/skills/sickn33-docx-official.md and its manifest at https://skillstore.io/api/skills/sickn33-docx-official/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "docx-official". Create a two-page project brief with objectives, milestones, risks, and owners.

Expected outcome:

A formatted Word brief with a title, summary, milestone table, risk section, owner assignments, and page numbers.

Using "docx-official". Change the contract notice period from 30 days to 60 days with tracked changes.

Expected outcome:

A revised DOCX showing only the changed number as a deletion and insertion while preserving the surrounding text.

Using "docx-official". Add review comments to unclear sections and verify the final document.

Expected outcome:

A commented Word document with valid comment references, preserved content, successful structural checks, and a completed visual review.

Security Audit

Safe
v8 โ€ข 8/18/2026 Open versioned report

Most alerts are false positives from OOXML namespaces, Markdown formatting, schema imports, and expected local file operations. Six findings remain confirmed: three privileged installation instructions and three unbounded archive extraction paths. No prompt injection, exfiltration, or unauthorized network behavior was found. Static review was capped at 400/452 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

59
Files scanned
24,912
Lines analyzed
6
Review items
0
False positives ignored
Capability review items (6)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
sudo privilege escalation
- **pandoc**: `sudo apt-get install pandoc` (for text extraction)
SKILL.md directs the agent to run sudo apt-get for dependencies. These commands modify the host with elevated privileges and require explicit user approval.
High
sudo privilege escalation
- **LibreOffice**: `sudo apt-get install libreoffice` (for PDF conversion)
SKILL.md directs the agent to run sudo apt-get for dependencies. These commands modify the host with elevated privileges and require explicit user approval.
High
sudo privilege escalation
- **Poppler**: `sudo apt-get install poppler-utils` (for pdftoppm to convert PDF to images)
SKILL.md directs the agent to run sudo apt-get for dependencies. These commands modify the host with elevated privileges and require explicit user approval.
Medium
Python archive libraries
with zipfile.ZipFile(self.original_file, "r") as zip_ref:
The validator extracts a user-supplied Office archive without member-count, total-size, or compression-ratio limits. A crafted DOCX can exhaust disk or memory.
Medium
Python archive libraries
with zipfile.ZipFile(self.original_file, "r") as zip_ref:
The validator extracts a user-supplied Office archive without member-count, total-size, or compression-ratio limits. A crafted DOCX can exhaust disk or memory.
Medium
Python archive libraries
with zipfile.ZipFile(self.original_docx, "r") as zip_ref:
The validator extracts a user-supplied Office archive without member-count, total-size, or compression-ratio limits. A crafted DOCX can exhaust disk or memory.

Risk Factors

๐ŸŒ Network access (50)
docx-js.md:240 ooxml.md:166 ooxml.md:167 ooxml.md:187 ooxml.md:188 ooxml.md:189 ooxml.md:231 ooxml.md:232 ooxml.md:465 ooxml.md:477 ooxml.md:478 ooxml.md:479 ooxml/schemas/ecma/fouth-edition/opc-contentTypes.xsd:2 ooxml/schemas/ecma/fouth-edition/opc-contentTypes.xsd:4 ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd:2 ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd:3 ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd:4 ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd:5 ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd:7 ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd:8 ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd:9 ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd:10 ooxml/schemas/ecma/fouth-edition/opc-digSig.xsd:2 ooxml/schemas/ecma/fouth-edition/opc-digSig.xsd:4 ooxml/schemas/ecma/fouth-edition/opc-relationships.xsd:2 ooxml/schemas/ecma/fouth-edition/opc-relationships.xsd:4 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:3 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:4 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:5 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:6 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:7 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:8 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:10 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:12 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:14 ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd:16 ooxml/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsd:3 ooxml/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsd:4 ooxml/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsd:5 ooxml/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsd:7 ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd:3 ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd:4 ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd:5 ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd:6 ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd:7 ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd:9 ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd:11 ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd:13 ooxml/schemas/ISO-IEC29500-4_2016/dml-lockedCanvas.xsd:3 ooxml/schemas/ISO-IEC29500-4_2016/dml-lockedCanvas.xsd:4
๐Ÿ“ Filesystem access (50)
docx-js.md:20 docx-js.md:265 docx-js.md:20 docx-js.md:265 ooxml.md:280 ooxml.md:456 ooxml.md:455 ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd:12 ooxml/schemas/microsoft/wml-2010.xsd:3 ooxml/schemas/microsoft/wml-2012.xsd:2 ooxml/schemas/microsoft/wml-2012.xsd:3 ooxml/schemas/microsoft/wml-2018.xsd:2 ooxml/schemas/microsoft/wml-cex-2018.xsd:3 ooxml/schemas/microsoft/wml-cex-2018.xsd:4 ooxml/schemas/microsoft/wml-cid-2016.xsd:2 ooxml/schemas/microsoft/wml-sdtdatahash-2020.xsd:2 ooxml/schemas/microsoft/wml-symex-2015.xsd:2 ooxml/scripts/pack.py:58 ooxml/scripts/pack.py:82 ooxml/scripts/pack.py:13 ooxml/scripts/pack.py:102 ooxml/scripts/pack.py:140 ooxml/scripts/pack.py:193 ooxml/scripts/pack.py:15 ooxml/scripts/pack.py:114 ooxml/scripts/unpack.py:47 ooxml/scripts/unpack.py:8 ooxml/scripts/unpack.py:30 ooxml/scripts/unpack.py:39 ooxml/scripts/unpack.py:50 ooxml/scripts/unpack.py:77 ooxml/scripts/validate.py:25 ooxml/scripts/validation/base.py:373 ooxml/scripts/validation/base.py:375 ooxml/scripts/validation/base.py:901 ooxml/scripts/validation/base.py:909 ooxml/scripts/validation/base.py:34 ooxml/scripts/validation/base.py:902 ooxml/scripts/validation/base.py:913 ooxml/scripts/validation/docx.py:7 ooxml/scripts/validation/docx.py:217 ooxml/scripts/validation/docx.py:30 ooxml/scripts/validation/docx.py:8 ooxml/scripts/validation/docx.py:219 ooxml/scripts/validation/pptx.py:272 ooxml/scripts/validation/redlining.py:7 ooxml/scripts/validation/redlining.py:82 ooxml/scripts/validation/redlining.py:158 ooxml/scripts/validation/redlining.py:28 ooxml/scripts/validation/redlining.py:8
โš™๏ธ External commands (49)
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-docx-official/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-docx-official/security.svg)](https://skillstore.io/skills/sickn33-docx-official?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-docx-official?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-docx-official/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-docx-official.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

sickn33. (2026). docx-official security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-docx-official/audits/8

BibTeX citation

@techreport{sickn33-sickn33-docx-official-2026, author = {sickn33}, title = {docx-official security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/sickn33-docx-official/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "docx-official security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-08-18" url: "https://skillstore.io/skills/sickn33-docx-official/audits/8" identifiers: - type: other value: "skillstore:sickn33-docx-official:audit:8" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
85
Maintainability
87
Content
76
Community
83
Spec Compliance

What You Can Build

Prepare business documents

Create polished proposals, reports, and briefs with headings, tables, images, links, and page structure.

Review tracked revisions

Apply precise insertions, deletions, and comments while preserving existing revisions for transparent review.

Automate document production

Build repeatable DOCX generation and OOXML editing workflows with validation before delivery.

Try These Prompts

Create a simple document
Create a DOCX from this text: [content]. Use a title, clear headings, readable body text, and page numbers.
Format a business report
Create a professional DOCX report from [source]. Include an executive summary, consistent headings, tables where useful, and a final recommendations section.
Edit with tracked changes
Revise [document path] for clarity and consistency. Preserve existing formatting and record every substantive edit as a tracked change.
Perform advanced OOXML revision
Update [document path] with [changes]. Preserve comments and prior revisions, validate OOXML relationships, repack the file, and visually inspect every page.

Best Practices

  • Keep original documents unchanged and write revisions to a separate output file.
  • Use tracked changes for legal, academic, business, and government document revisions.
  • Validate structure and inspect rendered pages before delivering the final DOCX.

Avoid

  • Do not replace complete paragraphs when only a few words changed.
  • Do not use Markdown line numbers as OOXML element locations.
  • Do not install system dependencies with elevated privileges without explicit user approval.

Frequently Asked Questions

Can this skill create a DOCX from scratch?
Yes. It provides a docx-js workflow for headings, lists, tables, images, links, headers, footers, and page settings.
Can it edit an existing Word document?
Yes. It can unpack OOXML, modify document parts with Python helpers, validate changes, and repack the result.
Does it support tracked changes?
Yes. It documents precise insertion and deletion patterns and includes validation for tracked revisions.
Can it preserve comments and previous revisions?
The workflows support comments and existing revisions, but complex documents require careful validation and visual inspection.
Which dependencies are required?
Tasks may require Pandoc, docx-js, LibreOffice, Poppler, defusedxml, lxml, and Git. Availability depends on the requested workflow.
Is the output guaranteed to render identically everywhere?
No. Rendering can differ across Word processors, so the final document should be inspected in the target application.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

7fe1890a6474a81fcd867f29f7b8e18ecbd1dfe0

Maintenance freshness

8/18/2026

Usage

45 downloads ยท 572 views

File structure

๐Ÿ“„ docx-js.md

๐Ÿ“„ LICENSE.txt

๐Ÿ“ ooxml/

๐Ÿ“ schemas/

๐Ÿ“ ecma/

๐Ÿ“ fouth-edition/

๐Ÿ“„ opc-contentTypes.xsd

๐Ÿ“„ opc-coreProperties.xsd

๐Ÿ“„ opc-digSig.xsd

๐Ÿ“„ opc-relationships.xsd

๐Ÿ“ ISO-IEC29500-4_2016/

๐Ÿ“„ dml-chart.xsd

๐Ÿ“„ dml-chartDrawing.xsd

๐Ÿ“„ dml-diagram.xsd

๐Ÿ“„ dml-lockedCanvas.xsd

๐Ÿ“„ dml-main.xsd

๐Ÿ“„ dml-picture.xsd

๐Ÿ“„ dml-spreadsheetDrawing.xsd

๐Ÿ“„ dml-wordprocessingDrawing.xsd

๐Ÿ“„ pml.xsd

๐Ÿ“„ shared-additionalCharacteristics.xsd

๐Ÿ“„ shared-bibliography.xsd

๐Ÿ“„ shared-commonSimpleTypes.xsd

๐Ÿ“„ shared-customXmlDataProperties.xsd

๐Ÿ“„ shared-customXmlSchemaProperties.xsd

๐Ÿ“„ shared-documentPropertiesCustom.xsd

๐Ÿ“„ shared-documentPropertiesExtended.xsd

๐Ÿ“„ shared-documentPropertiesVariantTypes.xsd

๐Ÿ“„ shared-math.xsd

๐Ÿ“„ shared-relationshipReference.xsd

๐Ÿ“„ sml.xsd

๐Ÿ“„ vml-main.xsd

๐Ÿ“„ vml-officeDrawing.xsd

๐Ÿ“„ vml-presentationDrawing.xsd

๐Ÿ“„ vml-spreadsheetDrawing.xsd

๐Ÿ“„ vml-wordprocessingDrawing.xsd

๐Ÿ“„ wml.xsd

๐Ÿ“„ xml.xsd

๐Ÿ“ mce/

๐Ÿ“„ mc.xsd

๐Ÿ“ microsoft/

๐Ÿ“„ wml-2010.xsd

๐Ÿ“„ wml-2012.xsd

๐Ÿ“„ wml-2018.xsd

๐Ÿ“„ wml-cex-2018.xsd

๐Ÿ“„ wml-cid-2016.xsd

๐Ÿ“„ wml-sdtdatahash-2020.xsd

๐Ÿ“„ wml-symex-2015.xsd

๐Ÿ“ scripts/

๐Ÿ“„ pack.py

๐Ÿ“„ unpack.py

๐Ÿ“„ validate.py

๐Ÿ“ validation/

๐Ÿ“„ __init__.py

๐Ÿ“„ base.py

๐Ÿ“„ docx.py

๐Ÿ“„ pptx.py

๐Ÿ“„ redlining.py

๐Ÿ“„ ooxml.md

๐Ÿ“ scripts/

๐Ÿ“„ __init__.py

๐Ÿ“„ document.py

๐Ÿ“ templates/

๐Ÿ“„ comments.xml

๐Ÿ“„ commentsExtended.xml

๐Ÿ“„ commentsExtensible.xml

๐Ÿ“„ commentsIds.xml

๐Ÿ“„ people.xml

๐Ÿ“„ utilities.py

๐Ÿ“„ SKILL.md

More from sickn33

View all
View all