📦

docx

Name: docx
Author: ZhanlinCui

Content revision r1 Safe 🌐 Network access📁 Filesystem access⚙️ External commands

Create and Edit DOCX Documents

Professional DOCX work often requires preserving comments, tracked changes, and formatting. This skill guides Claude, Codex, and Claude Code through structured OOXML workflows.

Supports: Claude Codex Code(CC)

📊 75 Adequate

This skill is part of a pack

Install the whole pack to get every skill the task needs, in one command.

KeywayTech Work Skills · 10 skills Install whole pack

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "docx" from https://skillstore.io/skills/zhanlincui-docx.md and its manifest at https://skillstore.io/api/skills/zhanlincui-docx/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/zhanlincui-docx.md Signed manifest GET /api/skills/zhanlincui-docx/manifest Signed lockfile GET /api/skills/zhanlincui-docx/lockfile

Test it

Using "docx". A user asks for a contract clause to be revised with tracked changes.

Expected outcome:

The assistant returns a DOCX where only the changed words are marked as insertions and deletions.

Using "docx". A user provides meeting notes and asks for a polished Word report.

Expected outcome:

The assistant produces a formatted DOCX with headings, lists, tables, page layout, and consistent typography.

Using "docx". A user asks whether a generated DOCX is structurally valid.

Expected outcome:

The assistant reports validation results, explains document issues, and rebuilds the file after fixes.

Security Audit

Safe

v4 • 7/21/2026 Open versioned report

Four archive-extraction calls accept Office ZIP archives without validating member paths, creating a high-confidence Zip Slip risk. The remaining 396 static matches are false positives from OOXML schemas, local document-processing code, or Markdown examples; no outbound network behavior or prompt injection was evidenced. Static review was capped at 400/450 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Files scanned

24,694

Lines analyzed

Review items

False positives ignored

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

ooxml/scripts/unpack.py:17

Archive extract all (zip slip risk)

zipfile.ZipFile(input_file).extractall(output_path)

The code calls ZipFile.extractall on an archive supplied through a file path without validating member paths. A crafted Office archive can write outside the intended extraction directory.

High

ooxml/scripts/validation/base.py:891

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code calls ZipFile.extractall on an archive supplied through a file path without validating member paths. A crafted Office archive can write outside the intended extraction directory.

High

ooxml/scripts/validation/docx.py:201

Archive extract all (zip slip risk)

zip_ref.extractall(temp_dir)

The code calls ZipFile.extractall on an archive supplied through a file path without validating member paths. A crafted Office archive can write outside the intended extraction directory.

High

ooxml/scripts/validation/redlining.py:70

Archive extract all (zip slip risk)

zip_ref.extractall(temp_path)

The code calls ZipFile.extractall on an archive supplied through a file path without validating member paths. A crafted Office archive can write outside the intended extraction directory.

Risk Factors

🌐 Network access (50)

📁 Filesystem access (50)

⚙️ External commands (49)

ooxml/scripts/pack.py:103 ooxml/scripts/validation/redlining.py:153 ooxml/scripts/validation/redlining.py:185 SKILL.md:36-40 SKILL.md:40-46 SKILL.md:46-49 SKILL.md:49-50 SKILL.md:50-51 SKILL.md:51-52 SKILL.md:52 SKILL.md:59-68 SKILL.md:68-69 SKILL.md:69-71 SKILL.md:71-82 SKILL.md:82-85 SKILL.md:85-91 SKILL.md:91-96 SKILL.md:96-98 SKILL.md:98-116 SKILL.md:116-117 SKILL.md:117-132 SKILL.md:132 SKILL.md:134 SKILL.md:136-139 SKILL.md:139-141 SKILL.md:141-145 SKILL.md:145-147 SKILL.md:147-149 SKILL.md:149-152 SKILL.md:152-161 SKILL.md:161-163 SKILL.md:163-166 SKILL.md:166-168 SKILL.md:168-169 SKILL.md:169 SKILL.md:172-173 SKILL.md:173 SKILL.md:174 SKILL.md:175 SKILL.md:176-179 SKILL.md:179-181 SKILL.md:181-193 SKILL.md:193-194 SKILL.md:194-195 SKILL.md:195-196 SKILL.md:196-197 SKILL.md:193 SKILL.md:195 SKILL.md:196

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/zhanlincui-docx/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zhanlincui-docx/security.svg)](https://skillstore.io/skills/zhanlincui-docx?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zhanlincui-docx?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhanlincui-docx/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zhanlincui-docx.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

ZhanlinCui. (2026). docx security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zhanlincui-docx/audits/4

BibTeX citation

@techreport{zhanlincui-zhanlincui-docx-2026,
  author = {ZhanlinCui},
  title = {docx security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/zhanlincui-docx/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "docx security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "ZhanlinCui"
date-released: "2026-07-21"
url: "https://skillstore.io/skills/zhanlincui-docx/audits/4"
identifiers:
  - type: other
    value: "skillstore:zhanlincui-docx:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

11 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

7Spade Recommended

7spade-docx

Skillstore Score 76

Evidence Confidence High

Skillstore usage 76

Updated

2026-08-21

ZhanlinCui Current

zhanlincui-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 653

Updated

2026-08-21

anthropics

docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 181

Updated

2026-08-21

Cam10001110101

cam10001110101-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 41

Updated

2026-08-21

ComposioHQ

composiohq-docx

Skillstore Score 75

Evidence Confidence High

Skillstore usage 18

Updated

2026-08-21

sickn33

sickn33-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 35

Updated

2026-08-21

K-Dense-AI

k-dense-ai-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 24

Updated

2026-08-21

davila7

davila7-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 11

Updated

2026-08-21

DYAI2025

dyai2025-docx

Skillstore Score 75

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

ArtemisAI

artemisai-docx

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 41

Updated

2026-08-21

Azeem-2

azeem-2-docx

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 12

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Review Contract Revisions

Apply precise tracked changes and comments while preserving review history in Word documents.

Generate Structured Reports

Create formatted DOCX reports with headings, tables, lists, images, headers, and footers.

Inspect Document Internals

Unpack DOCX files, inspect OOXML parts, adjust relationships, and validate the rebuilt document.

Try These Prompts

Extract Document Text

Read this DOCX file and summarize its contents. Preserve visible tracked changes in the summary.

Create a New DOCX

Create a professional DOCX report with a title, sections, bullet lists, a table, and consistent styling.

Add Review Comments

Add Word comments to the attached document for unclear clauses, missing definitions, and inconsistent dates.

Implement Tracked Changes

Apply these negotiated edits as tracked changes, validate the XML, and produce a final DOCX for review.

Best Practices

Work on copied documents and keep the original DOCX unchanged.
Validate after each batch of tracked changes or XML edits.
Use precise surrounding text when mapping requested edits to OOXML nodes.

Avoid

Do not unpack untrusted Office files outside an isolated working directory.
Do not mark entire paragraphs as changed when only a few words changed.
Do not skip final validation after direct OOXML edits.

Frequently Asked Questions

Can this skill create new Word documents?

Yes. It includes guidance for generating DOCX files with styles, tables, images, and layout settings.

Can it preserve tracked changes?

Yes. The redlining workflow focuses on precise insertions, deletions, comments, and verification.

Does it require external software?

Yes. Some workflows depend on Pandoc, LibreOffice, Poppler, Node.js packages, and Python libraries.

Is it safe for untrusted DOCX files?

Use caution. The skill extracts Office archives, so untrusted files should stay inside an isolated workspace.

Can it edit comments?

Yes. The document helper supports adding comments and replies through Word comment XML infrastructure.

Can it validate every Word feature?

No. It includes OOXML validation helpers, but Microsoft Word compatibility can still require manual review.

Developer Details

Author

ZhanlinCui

License

Proprietary. LICENSE.txt has complete terms

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/docx

Ref

64ca8af0f54a325752f08bd54e52151061ea659a

Maintenance freshness

7/20/2026

Usage

626 downloads · 215 views

File structure

📁 ooxml/

📁 schemas/

📁 ecma/

📁 fouth-edition/

📁 ISO-IEC29500-4_2016/

📄 dml-chart.xsd

📄 dml-chartDrawing.xsd

📄 dml-diagram.xsd

📄 dml-lockedCanvas.xsd

📄 dml-main.xsd

📄 dml-picture.xsd

📄 dml-spreadsheetDrawing.xsd

📄 dml-wordprocessingDrawing.xsd

📄 pml.xsd

📄 shared-additionalCharacteristics.xsd

📄 shared-bibliography.xsd

📄 shared-commonSimpleTypes.xsd

📄 shared-customXmlDataProperties.xsd

📄 shared-customXmlSchemaProperties.xsd

📄 shared-documentPropertiesCustom.xsd

📄 shared-documentPropertiesExtended.xsd

📄 shared-documentPropertiesVariantTypes.xsd

📄 shared-math.xsd

📄 shared-relationshipReference.xsd

📄 sml.xsd

📄 vml-main.xsd

📄 vml-officeDrawing.xsd

📄 vml-presentationDrawing.xsd

📄 vml-spreadsheetDrawing.xsd

📄 vml-wordprocessingDrawing.xsd

📄 wml.xsd

📄 xml.xsd

📁 mce/

📄 mc.xsd

📁 microsoft/

📄 wml-2010.xsd

📄 wml-2012.xsd

📄 wml-2018.xsd

📄 wml-cex-2018.xsd

📄 wml-cid-2016.xsd

📄 wml-sdtdatahash-2020.xsd

📄 wml-symex-2015.xsd

📁 scripts/

📁 validation/

📄 __init__.py

📄 base.py

📄 docx.py

📄 pptx.py

📄 redlining.py

📄 pack.py

📄 unpack.py

📄 validate.py

📁 scripts/

📁 templates/

📄 comments.xml

📄 commentsExtended.xml

📄 commentsExtensible.xml

📄 commentsIds.xml

📄 people.xml

📄 __init__.py

📄 document.py

📄 utilities.py

📄 docx-js.md

📄 ooxml.md

📄 SKILL.md

docx

Install with my Agent

Agent-readable resources

Test it

Security Audit

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Review Contract Revisions

Generate Structured Reports

Inspect Document Internals

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from ZhanlinCui

planning-with-files

github-release-assistant

obsidian-helper

pdf

frontend-design

brainstorming

docx-official

pptx-official

working-with-documents

jstodocx-api

minimax-docx

security-report

docx

Install with my Agent

Agent-readable resources

Test it

Security Audit

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Compare variants

Skillstore Score

What You Can Build

Review Contract Revisions

Generate Structured Reports

Inspect Document Internals

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from ZhanlinCui

planning-with-files

github-release-assistant

obsidian-helper

pdf

frontend-design

brainstorming

Related Skills

docx-official

pptx-official

working-with-documents

jstodocx-api

minimax-docx

security-report