Skill scan report

docx

View on GitHub

10 Low Automated analysis flagged 1 potential risk pattern.

What this skill does

Document creation, editing, and analysis with support for .docx files

github/jjyaoao - Dangerous Code Execution - 2.7k stars

ThreatsDangerous Code Execution

Threat analysis

Dangerous Code Execution1 finding

Skill info

Namejjyaoao/docx

Registrygithub

Version5432566

PURLpkg:github/jjyaoao/HelloAgents@5432566?skill=docx

Stars2.7k

SourceView on GitHub

Assessments (1)

Dangerous Code Execution1 finding MEDIUM

MEDIUM

Dangerous Code Execution via skillspector

ooxml/scripts/pack.py

            result = subprocess.run(
                [
                    "soffice",
                    "--headless",
                    "--convert-to",
                    filter_name,

Badge

Add the Anomity scan badge for docx to your README.

Markdown

[![Anomity Skill Check](https://anomity.ai/skills/badge.svg)](https://anomity.ai/skills/github/jjyaoao/docx/)

HTML

<a href="https://anomity.ai/skills/github/jjyaoao/docx/"><img src="https://anomity.ai/skills/badge.svg" alt="Anomity Skill Check"></a>

Image URL

https://anomity.ai/skills/badge.svg

How Anomity governs this at runtime

Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.

Book a 30-minute demo to see your own skill inventory.

Methodology and disputes

Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of docx? Report an issue or request a rescan.