Office Document Specialist Suite 1.0.2

PassAudited by ClawScan on May 10, 2026.

Overview

The skill appears to be a simple Word document helper, but its description overstates Excel/PowerPoint support and its setup installs Python dependencies.

Install only if you are comfortable running the provided setup script in a Python virtual environment. Expect Word .docx template/styling features rather than full Excel or PowerPoint automation, and run it on copies of important documents.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI09: Human-Agent Trust Exploitation

What this means

A user may expect spreadsheet or slide-deck functionality that is not actually present in the provided files.

Why it was flagged

The skill advertises Excel and PowerPoint capabilities, but the supplied runnable code only exposes Word .docx commands, so the description is broader than the actual implementation.

Skill content

- **Excel (.xlsx)**: Data analysis, automated spreadsheet generation, and complex formatting.
- **PowerPoint (.pptx)**: Automated slide deck creation from structured data.

Recommendation

Treat this as a Word-document helper unless the publisher supplies additional reviewed Excel/PowerPoint code.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing the skill depends on packages fetched from the Python package ecosystem, and exact installed versions may vary over time.

Why it was flagged

The setup process installs dependencies using lower-bound version constraints, so future installs may resolve to newer package versions. This is common, but it is a supply-chain consideration.

Skill content

python-docx>=1.1.2
lxml>=5.3.0

Recommendation

Install in an isolated environment and pin or review dependency versions if you need reproducible or tightly controlled setups.

Info

#ASI02: Tool Misuse and Exploitation

What this means

If the agent or user chooses the wrong output path, an existing local document could be overwritten.

Why it was flagged

The tool can read an existing Word document and write a styled output file. This is expected for its purpose, but the file paths are supplied by the caller.

Skill content

doc = Document(input_file)
apply_advanced_layout(doc, landscape=landscape)
configure_styles(doc)
doc.save(output_file)

Recommendation

Use explicit output paths and work on copies of important documents.