Word Docx 1

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill appears harmless, but users may want to confirm they are installing the intended publisher/version.

Why it was flagged

The embedded metadata differs from the registry listing, which identifies owner ID kn78z2r5cyehmh21zf92vg3v6s8252qd, slug word-docx-1, and version 1.0.0. Because this skill is instruction-only with no code or install step, this is a provenance note rather than a behavioral concern.

Skill content
"ownerId": "kn73vp5rarc3b14rc7wjcw8f8580t5d1", "slug": "word-docx", "version": "1.0.2"
Recommendation

Verify the skill page, publisher, and version if provenance matters for your workflow.

What this means

A DOCX file may contain comments, deleted text, or review metadata that you do not normally see, and the agent may inspect it while helping with the document.

Why it was flagged

The skill explicitly teaches the agent to consider hidden DOCX structure such as tracked changes, comments, and deleted text. This is purpose-aligned for DOCX review, but it means sensitive review history may enter the agent's working context.

Skill content
Deleted text may still exist in the XML even when it no longer appears on screen.
Recommendation

Use this skill only with documents you are comfortable having the agent inspect, especially if they include tracked changes, comments, or prior review history.