Document Format Skills
PassAudited by ClawScan on May 1, 2026.
Overview
This looks like a local DOCX formatting tool; the main things to notice are that it rewrites output documents, installs a Python dependency, and may print small document snippets.
This skill is reasonable to install if you need local DOCX cleanup. Before using it, keep a backup, write to a separate output file, be aware that python-docx may be installed dynamically, and avoid processing highly sensitive documents if command output may be logged or shared with the agent.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the user supplies the wrong output path or overwrites an important file, the document formatting or text could be changed.
The skill is intended to run local scripts that read a DOCX and write an output DOCX. This is coherent with the purpose, but it is still file-mutation authority.
uv run --with python-docx python3 scripts/punctuation.py input.docx output.docx
Run it on copies or use a separate output filename, especially for important or confidential documents.
The first run may fetch a Python package from the configured package index, so the user is relying on that package source.
The documented workflow dynamically installs python-docx at runtime via uv. This is expected for the skill, but the dependency version/source is not pinned in the artifacts.
- python-docx 使用 `uv run --with python-docx` 自动安装。
Use a trusted Python package index and consider pinning python-docx in a controlled environment if reproducibility matters.
Small excerpts from sensitive documents may be visible in logs or the agent conversation during processing.
The punctuation fixer prints short previews of modified paragraphs, which can place document content into the terminal or agent transcript.
preview = para.text[:50] + "..." if len(para.text) > 50 else para.text
print(f" Para {i + 1}: {preview}")Avoid running it on documents whose contents should not appear in the agent session, or remove/reduce preview logging before use.