Office Generator Py
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill runs local Python scripts on your machine to install dependencies and generate files.
The skill explicitly asks the user/agent to run bundled Python setup code. This is expected for a Python-based Office generator, but it means use of the skill executes local code.
Install Python dependencies into the bundled virtualenv: ```bash python3 skills/office-generator-py/scripts/setup_engine.py ```
Run it only from a trusted copy of the skill, preferably as a normal user in an isolated environment.
Future installs could pull different dependency versions than the author tested, which slightly increases supply-chain and reproducibility risk.
The dependency list uses package names without pinned versions, so first-run setup will resolve whatever versions are current from the package source at install time.
python-docx docxtpl openpyxl XlsxWriter python-pptx pydantic
If using in a sensitive environment, pin and review dependency versions or install from a trusted package mirror.