Word Reader

PassAudited by ClawScan on May 1, 2026.

Overview

This skill coherently reads user-selected Word documents, but users should review the install steps and avoid processing sensitive documents unless they are comfortable exposing that text to the agent.

This appears appropriate for reading Word files. Before installing, review the dependency installation commands, preferably use a virtual environment, and only run it on documents whose contents and metadata you are willing to share with the agent.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you process confidential Word files, their text, tables, and metadata may become visible to the agent conversation or saved output.

Why it was flagged

The skill is designed to extract document contents and metadata, including in batch mode, so private or untrusted document text may be returned into the agent context or output.

Skill content
元数据获取 - 读取文档属性(作者、标题、创建时间等) ... python3 {baseDir}/scripts/read_word.py <目录路径> --batch
Recommendation

Use it only on documents you intend the agent to read, and treat extracted document text as data rather than instructions.

What this means

Running the installer can alter your Python or system package setup.

Why it was flagged

The setup script installs external packages without version pinning and may use system package managers; this is expected for the parser but changes the local environment.

Skill content
python3 -m pip install python-docx --break-system-packages ... sudo apt install -y python3-pip
Recommendation

Review the install script first and consider installing dependencies in a virtual environment.

What this means

Processing .doc files depends on a local external converter being installed and trusted.

Why it was flagged

For legacy .doc support, the skill invokes the local antiword converter on the user-selected file; no shell interpolation is shown.

Skill content
subprocess.run(['antiword', str(self.file_path)], capture_output=True, text=True, encoding='utf-8')
Recommendation

Install antiword only from a trusted package source, and keep document paths user-selected.