📦 Docx — 文档全能处理
v1.0.0一键创建、编辑、深度解析 Word 文档，保留格式、批注与修订痕迹，支持批量提取、比对与智能摘要，让合同、报告、论文处理效率翻倍。
0· 326·1 当前·1 累计
by @kidaiangel下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
What to check before installing or running this skill:
- Confirm provenance and license: LICENSE.txt claims Anthropic, but the skill source and owner metadata are 'unknown' — verify you have the right to use these materials under the stated license before proceeding.
- Environment requirements: SKILL.md and the scripts expect Python (with lxml and defusedxml), pandoc, Node/npm and the 'docx' Node package, and optionally LibreOffice/soffice for validation. Those are not listed in the skill metada...详细分析 ▾
ℹ 用途与能力
Files and scripts (unpack/pack/validation and OOXML validators) align with a document-authoring/validation skill; the included code implements the expected capabilities (text extraction, raw XML access, tracked-changes handling). However metadata declares no required binaries or environment, yet the SKILL.md and scripts rely on external tools (pandoc, Node/npm docx, soffice/LibreOffice, Python with lxml/defusedxml). The absence of declared runtime dependencies is an incoherence.
⚠ 指令范围
SKILL.md explicitly instructs the agent to run local Python scripts (ooxml/scripts/unpack.py, pack.py, validate.py) and to use pandoc and docx-js (Node) for some flows. It also mandates reading long local docs entirely (docx-js.md, ooxml.md). The instructions do not request or transmit data to external endpoints, nor do they reference unrelated system paths or credentials. The main concern is that the instructions assume external programs and node modules that are not listed as required, and they instruct broad file read/modify operations on .docx unpacked directories which should be run carefully and ideally in a sandbox.
✓ 安装机制
This is an instruction- plus code bundle with no install spec. No network downloads or external installer URLs are used; scripts are included in the skill itself. That reduces supply-chain risk compared with arbitrary download-based installs. However, the included scripts will be executed (Python), so the absence of an install step only lowers install-time risk, not runtime risk from executing the provided code.
⚠ 凭证需求
The skill declares no environment variables or credentials (which is appropriate), but it implicitly requires system binaries and libraries (python, pandoc, Node/npm with docx package, and optionally soffice/LibreOffice and lxml/defusedxml). Those runtime requirements are not declared in requires.* metadata. Also LICENSE.txt claims Anthropic ownership and additional restrictions; the repo owner ID does not clearly match Anthropic. That licensing/ownership mismatch is notable and should be clarified before use.
✓ 持久化与权限
No special persistence or always:true privilege is requested. The skill does not declare any system-wide config changes. It contains scripts that operate on local unpacked document directories but does not attempt to modify other skills or system agent configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/19
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install document-docx
镜像加速npx clawhub@latest install document-docx --registry https://cn.longxiaskill.com