by 安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only DOCX/Word authoring and editing guide and its declared requirements (no installs, no secrets) align with that purpose; nothing in the package indicates unexplained access or hidden behavior.
评估建议
This skill is an instruction-only DOCX/Word editing guide and appears internally consistent and low-risk. Before enabling: (1) note the metadata mismatches (version/ownerId) — they don't prove malice but reduce provenance; (2) only supply document files the agent legitimately needs (it may read whole .docx packages to follow its rules); (3) treat macro-enabled files (.docm) as higher risk and avoid providing sensitive documents until you test behavior on non-sensitive samples; (4) if you need st...详细分析 ▾
ℹ 用途与能力
The name, description, and SKILL.md consistently describe DOCX/Word handling and the skill requires no binaries, installs, or credentials, which is proportionate. Minor metadata inconsistencies exist: the registry metadata lists version 1.0.0 while SKILL.md shows 1.0.2, and the ownerId in _meta.json differs from the registry ownerId—these look like bookkeeping/mismatch issues rather than functional problems, but they reduce provenance confidence.
✓ 指令范围
SKILL.md is a detailed, OOXML-aware playbook for reading, editing, and preserving DOCX structure. It does not contain shell commands, network endpoints, or instructions to read unrelated system files or environment variables. The guidance is narrowly scoped to DOCX internals (styles, numbering, sections, tracked changes), which is appropriate for the stated purpose.
✓ 安装机制
There is no install spec and no code files; this is instruction-only, so nothing is written to disk or fetched during installation. This is the lowest-risk install pattern.
✓ 凭证需求
The skill declares no required environment variables, no primary credential, and no config paths. That aligns with an instruction-only authoring skill.
✓ 持久化与权限
always is false and the skill is user-invocable; autonomous invocation is allowed (the platform default). The skill does not request persistent presence, nor does it include install steps that would modify agent/system configuration.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSLinux · macOS · Windows
版本
latestv1.0.02026/3/24
Initial release
● 无害
安装命令
点击复制官方npx clawhub@latest install xiaomolong-word-docx
镜像加速npx clawhub@latest install xiaomolong-word-docx --registry https://cn.longxiaskill.com镜像同步中