docx
Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to produce professional documents with formatting
Install caution
Risk: High
Source: Anthropic Skills
Path: skills/docx/SKILL.md
Review flags: filesystem/home-directory access, package installation commands, shell command snippets. These are review signals, not definitive security judgments; inspect before installing.
Required permissions
- • Environment variables / secrets
- • Shell commands
- • Filesystem/home access
Permissions are inferred from SKILL.md text only. They are review prompts, not guarantees about runtime behavior.
Risk flags explained
Mentions filesystem writes, deletes, home-directory paths, or config/key locations.
Mentions package installation or dependency-fetching commands.
Contains shell command snippets. Review commands before copy/paste or agent execution.
Score explanation
Trust
- • Trust starts at 90 before review-signal penalties and metadata bonuses.
- • Risk-signal penalty: -35 from 3 detected flag(s).
- • Metadata bonus: +2 from author/version/description fields.
Utility
- • Utility starts at 55 and rewards clear descriptions, runnable examples, and explicit setup needs.
- • Description present: yes.
- • Command examples detected: 12.
- • Environment variables detected: 1.
Momentum
- • Momentum starts at 45 and uses public repo activity signals.
- • Recent repo update within 13 days.
- • Recent commit volume: 3 commit(s) in the lookback window (+9).
- • Source has strong public adoption: 166866 stars.
- • Fork activity suggests reuse: 19880 forks.
Overall
- • Overall score weights trust 45%, utility 35%, and momentum 20%.
Detected signals
Env vars
- • API
Commands
- • (npm, preinstalled — install only if
- • npm install
- • npm install docx
- • python scripts/accept_changes.py in.docx out.docx
- • python scripts/comment.py contract.docx "This cap is too low" -o annotated.docx
- • python scripts/comment.py unpacked/ "Agreed" --parent 0
- • python scripts/comment.py unpacked/ "Fees & expenses cap is too low"
- • python scripts/merge_runs.py doc.docx -o merged.docx
- • python scripts/merge_runs.py unpacked/ # coalesce fragmented runs so text is findable
- • python scripts/office/soffice.py --headless --convert-to docx file.doc
- • python scripts/office/soffice.py --headless --convert-to pdf output.docx
- • python scripts/office/validate.py out.docx --original doc.docx # XSD checks; --auto-repair fixes common issues
URLs
None detected in SKILL.md text scan.
Provenance & evidence
SkillRadar makes each review traceable back to the exact source path, source blob SHA, scanner version, and text-only policy that produced the report.
Evidence snippets
…hoose your approach by task: | Task | Approach | |---|---| | **Create** a new document | Write a `docx` (npm) script — see gotchas below | | **Edit** an existing document | `unzip` → e…
…ll's directory. ## Creating with docx-js — gotchas `docx` is preinstalled — do not run `npm install` first; write the script and `require('docx')` directly. Only if that require fails: `npm…
…proach by task: | Task | Approach | |---|---| | **Create** a new document | Write a `docx` (npm) script — see gotchas below | | **Edit** an existing document | `unzip` → edit `word/document.xml` → `zip` (docx-js cannot open existing files) | | **Read*…
Watch this skill
Get alerted when this skill adds credential requirements, shell commands, external domains, remote installer patterns, or risk-level changes.
Join watchlist betaMethodology note
SkillRadar scans SKILL.md as hostile text only. It does not execute commands, install packages, or load third-party skills.