Gonggong Hwpxskills Main

HWPX 문서(.hwpx 파일)를 생성, 읽기, 편집, 템플릿 치환하는 스킬. 한글 HWPX 포맷을 다루며 양식 기반 템플릿 치환 워크플로우를 제공합니다.

Security Scan

The skill's description says it manipulates HWPX templates, but the runtime instructions reference scripts, templates, and dependencies that are not included—this mismatch makes the package incomplete and potentially unsafe to run without further inspection.

Purpose & Capability

The SKILL.md describes HWPX template analysis and application and mentions run.py, lib/hwpx_shim.py, assets/report-template.hwpx, requirements.txt, and scripts/fix_namespaces.py — none of these files are present in the package manifest. That mismatch means the package as published cannot actually perform the claimed tasks without fetching or creating additional code/resources.

Instruction Scope

Instructions tell the agent to run local commands (./run.py analyze-template, ./run.py apply-template) and to read user uploads/ and write outputs/, but the referenced entrypoint and assets are missing. The README also instructs installing dependencies via pip (network activity) though no requirements.txt or install spec is included. This leaves wide agent discretion (download/install packages or run unknown code) which is not bounded by the package.

Install Mechanism

There is no install specification (instruction-only). That reduces automatic install risk, but the README suggests installing packages (python-hwpx) from source and running scripts. Because the skill provides no packaged install, anyone attempting to use it will need to fetch/install external code, increasing risk if sources are unverified.

Credentials

The skill declares no required environment variables, credentials, or config paths. There are no explicit requests for secrets. This is proportionate to its stated purpose, but the missing implementation means an operator might be prompted to supply or install third-party dependencies later.

Persistence & Privilege

always is false and default agent invocation is allowed. The skill does not request persistent or system-wide privileges in the manifest. There is no code here that attempts to modify other skills or system config, but because the package is incomplete, any fetched code could change that behavior.

What to consider before installing

This package is incomplete: SKILL.md and README reference run.py, a shim (lib/hwpx_shim.py), assets/report-template.hwpx, requirements.txt, and helper scripts, but those files are not included. Do not run arbitrary pip installs or scripts fetched from unknown sources. Before installing or using, ask the publisher for the missing files or a trusted upstream repository, and inspect the run.py and any shim/scripts for network calls, file-system operations, or credential use. If you need this functionality, prefer a packaged implementation with an explicit install spec (requirements.txt or install script) and a verifiable source (GitHub repo/release) and avoid placing sensitive documents into the uploads/ folder until you have reviewed the code. If you cannot obtain or review the missing code, treat the package as untrusted.

hwpx_my

HWPX 문서 생성·편집 스킬 (hwpx_my)

이 스킬은 ZIP-level 치환을 통한 템플릿 기반 문서 생성을 지원합니다. 기본 제공 템플릿은 assets/report-template.hwpx 입니다. 사용자가 업로드한 템플릿은 uploads/ 폴더에 놓아 사용합니다. 결과는 outputs/에 생성됩니다.

Commands:

• analyze-template <path> : 템플릿 내 텍스트 플레이스홀더를 추출
• apply-template <template> <mapping.json> <out.hwpx> : mapping에 따라 치환하고 outputs에 저장

Notes:

• For full ObjectFinder features install python-hwpx; a lightweight shim is provided under lib/hwpx_shim.py if python-hwpx is unavailable.

License: MIT