docx
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileThe skill's documented capabilities (creating, editing, and analyzing Word documents using standard local tooling) are coherent with its described purpose. There are no evident malicious data flows, credential handling, or external exfiltration patterns. The use of common, verifiable toolchains (docx npm package, pandoc, LibreOffice) is typical for document-centric automation. However, the presence of multiple external tooling steps and file manipulations warrants standard security hygiene (sandboxed execution, path validation, and integrity checks) to prevent accidental document corruption or unintended writes. Overall, classify as BENIGN with moderate caution due to the potential for local side-effects in document processing environments.