Docx Cn

Word 文档处理 | Word Document Processing. 创建、读取、编辑 Word 文档 | Create, read, edit Word documents. 支持 .docx 格式、格式化、表格、图片 | Supports .docx format, formatting, tables...

Review before installing. Use this skill only in an isolated workspace, avoid processing untrusted Office files in a shared multi-user environment, clear or protect /tmp/lo_socket_shim.so and /tmp/libreoffice_docx_profile, and prefer a version that uses private per-run temporary directories, exact macro/shim verification, timeout failures, and pinned dependencies.

Type: OpenClaw Skill Name: docx-cn Version: 1.0.1 The skill bundle is classified as suspicious primarily due to the `scripts/office/soffice.py` file. This script dynamically compiles a C shim using `gcc` and then injects it into the LibreOffice process via `LD_PRELOAD`. While the C code itself appears to be a benign network shim designed to bypass sandbox restrictions for AF_UNIX sockets, the technique of dynamic code compilation and `LD_PRELOAD` is a highly privileged and powerful capability. If an attacker could inject malicious C code or manipulate the compilation process, it would lead to arbitrary code execution (RCE). This represents a critical vulnerability, even if the current intent is functional rather than malicious. Other aspects, such as extensive external command execution (`pandoc`, `pdftoppm`, `npm`) and direct XML manipulation, are expected for a document processing skill, and the use of `defusedxml` and template tag sanitization (`validators/base.py`) are positive security practices.