docx-to-md

• Verdict: Pass
• Confidence: High
• Analyzed: May 1, 2026, 6:07 AM
• Findings: 1
• Version: 1.0.0

Overview

This appears to be a straightforward local DOCX-to-Markdown converter, with the main thing to notice being its user-installed Python dependency.

This skill is reasonable to use for local DOCX conversion. Before installing, make sure python-docx comes from a trusted source, and run the converter only on documents you intend to extract into Markdown and image files.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

NoteHigh Confidence

What this means

Installing an external package can introduce dependency risk if the package source or version is not controlled.

Why it was flagged

The skill depends on an external Python package that is installed manually and without a pinned version. This is expected for the converter, but users should install it from a trusted source.

Skill content

pip install python-docx

Recommendation

Install python-docx from the official Python package index or a trusted internal mirror, and consider pinning a known-good version if used in a controlled environment.