Government Word Format Standardizer

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill appears to be a straightforward DOCX formatting converter, with expected local Python execution and no artifact evidence of credential use, networking, persistence, or exfiltration.

Before installing, be comfortable letting the skill run its bundled Python converter on DOCX files you provide. Keep backups, use a non-sensitive output path, verify Python and the required Chinese fonts are available, and manually review converted documents as the skill itself recommends.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent will run a local script against the DOCX file the user provides and create a converted output file.

Why it was flagged

This confirms the skill executes a bundled Python converter locally. It is disclosed and central to the document-conversion purpose, but users should recognize that invoking the skill runs local code that reads and writes document files.

Skill content
Run `scripts/convert_to_house_style.py` with the input file and a target output path.
Recommendation

Use it only on documents you intend to convert, keep an original backup, choose a safe output path, and review the resulting document.

What this means

The skill may fail or behave unexpectedly on systems without a usable Python runtime or required fonts.

Why it was flagged

The metadata does not declare a Python runtime or install mechanism, even though SKILL.md's workflow invokes `python scripts/convert_to_house_style.py`; this is a transparency/setup note rather than hidden behavior.

Skill content
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Recommendation

The publisher should declare the Python/runtime expectation; users should ensure Python and the required fonts are available before relying on the conversion.