Office Document Editor

Professional DOCX/PPTX document editing with tracked changes, formatting preservation, highlights, strikethrough, and Git version control.

This skill appears to do what it says: fetch files (uploads/URL/SFTP/local), apply replacements/formatting to DOCX/PPTX, generate diffs, and help commit to Git. Before installing: (1) be aware that 'tracked changes' is implemented as visible formatting (highlights/strike) not Word's revision-tracking metadata; (2) SFTP operations will attempt to connect to hosts you supply and use your system sftp client (you should not supply credentials to untrusted hosts); (3) the skill writes files into your OpenClaw workspace (~/.openclaw/workspace) and can copy edited files back into the workspace media folder—ensure that is acceptable for your data-sensitivity requirements. If you rely specifically on Word's native 'Track Changes' feature, test carefully first. If you want additional assurance, review the scripts locally before running, or run them in an isolated environment.

Type: OpenClaw Skill Name: office-document-editor Version: 1.0.0 This skill is classified as suspicious due to its broad capabilities for file system access and network operations, which present significant vulnerabilities for potential misuse, even without explicit malicious intent in the code. The `scripts/fetch_file.sh` and `scripts/interactive_edit.sh` scripts allow fetching and uploading files via arbitrary local paths, URLs (using `curl`/`wget`), and SFTP connections. While these are necessary for the stated purpose of a 'Universal Office Document Editor', they could be exploited via prompt injection against the AI agent to download and execute malicious payloads, or to exfiltrate sensitive local files to attacker-controlled remote servers. The `SKILL.md` instructions, particularly the phrase 'any DOCX/PPTX file from any source', further amplify this risk by encouraging broad interpretation by the agent.