by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it claims and has no network calls or secret requirements, but take these precautions before using it:
- Run conversions on copies of files, not originals, so you can recover if something goes wrong.
- Be cautious with untrusted .doc files: opening them with Word can execute macros or fetch external content. Prefer converting on an isolated or sandboxed Windows machine, enable Protected View, or disable macros before batch conversion.
- Review the included scripts y...详细分析 ▾
✓ 用途与能力
The name/description, SKILL.md, and included scripts align: doc_to_docx_com.py uses Word COM for .doc→.docx (Windows+Word required) and xls_to_xlsx.py uses xlrd/openpyxl for .xls→.xlsx. No unrelated binaries, env vars, or config paths are requested.
ℹ 指令范围
Runtime instructions are narrowly scoped to running the two scripts and installing the indicated Python packages. The doc conversion uses local Word COM automation which will open the provided .doc files — this is expected for the stated purpose but can expose the host to risks inherent in opening untrusted Word documents (macros, external links, embedded content). SKILL.md does not mention disabling macros or using protected/sandboxed view; consider adding guidance to avoid processing untrusted files on production systems.
✓ 安装机制
This is an instruction-only skill with no install spec that pulls code from arbitrary URLs. All code is included in the bundle and there are no network fetches or archive extracts in the install phase.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. Requiring Microsoft Word and Python packages is proportionate to the conversion tasks.
✓ 持久化与权限
The skill does not request always:true, does not modify other skills or system configuration, and contains no persistence mechanisms. It runs locally and acts only on user-specified files/directories.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/5
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install doc-xls2docx-xlsx
镜像加速npx clawhub@latest install doc-xls2docx-xlsx --registry https://cn.longxiaskill.com