📦 Docx
v1.0.1Builder 是一套基于 docx npm 库的 Word 文档排版样式系统，用于生成带专业配色、表格、标题层级的 .docx 文档，适用于 PRD、技术方案、项目汇报、会议纪要等结构化文档的模板输出。
0· 46·0 当前·0 累计
by @casperkwok下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill appears to do what it says (generate .docx via the docx npm lib) and asks for only node/npm, but there is a minor coherence issue (example imports a module name that isn't present) and you should review the package installation and files before running.
评估建议
This skill is broadly coherent for generating .docx files with the 'docx' npm library, but take these precautions before installing or running: 1) Confirm the example import mismatch — examples require './docx-skill' but the repo provides references/docx-template.js; rename or adapt files so requires resolve. 2) Review references/docx-template.js to ensure there are no unexpected network calls or dynamic evals (the provided portion appears local and benign). 3) Installing 'docx' via npm installs...详细分析 ▾
ℹ 用途与能力
Name/description align with actual behavior: code and SKILL.md implement a docx-generation template using the 'docx' npm package. Requested binaries (node, npm) and the install spec (npm package 'docx') are appropriate. Minor incoherence: the example script requires './docx-skill' but the provided implementation file is named references/docx-template.js (no top-level docx-skill.js), so consumers may need to rename or adapt files.
ℹ 指令范围
SKILL.md instructs the agent to produce runnable Node.js scripts that require('docx') and use Packer.toBuffer + fs.writeFileSync to save .docx files — this is expected for the stated purpose. The instructions do not request environment variables, network endpoints, or access to unrelated system files. They do instruct writing output files to disk (expected). The activation triggers (user request or /generate-docx) are appropriately scoped. The missing/ambiguous module filename between example and implementation is a scope/coherence issue.
✓ 安装机制
Install uses the npm 'docx' package (declared in the install spec). This is an expected, traceable registry install for a Node-based docx generator. No downloads from arbitrary URLs or extract steps are present.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. The skill does not ask for unrelated secrets or broad environment access.
✓ 持久化与权限
always is false; the skill is user-invocable and allows model invocation (default) which is normal. It does not request permanent system-wide privileges, nor does it modify other skills' configuration in the provided files.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/22
Rename to docx-builder, refine description for clarity
● 无害
安装命令
点击复制官方npx clawhub@latest install docx-builder
镜像加速npx clawhub@latest install docx-builder --registry https://cn.longxiaskill.com