← 返回 Skills 市场
176
总下载
1
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install officecli-docx
功能描述
Use this skill any time a .docx file is involved -- as input, output, or both. This includes: creating Word documents, reports, letters, memos, or proposals;...
安全使用建议
This skill's functionality (manipulating .docx files) looks coherent, but its SKILL.md tells the agent to curl a script from raw.githubusercontent.com and execute it to install a third‑party 'officecli' tool — without any checksum or signature verification and while the skill metadata declares no required binaries. Before installing or allowing autonomous use: (1) inspect the installer script at https://raw.githubusercontent.com/iOfficeAI/OfficeCli/main/install.sh yourself (do not run it) to verify what it does; (2) prefer installing officecli manually from a trusted, signed release (or request the skill author provide a verified install spec); (3) if you must run the automated install, run it in a sandboxed environment or VM; (4) ask the publisher for a homepage, release checksums/signatures, or an official package source (e.g., GitHub releases with checksums or a well-known package registry); and (5) avoid giving this skill broad autonomous execution privileges until you confirm the install script is safe. If you can't validate the installer, treat this skill as high-risk.
功能分析
Type: OpenClaw Skill
Name: officecli-docx
Version: 1.0.2
The skill bundle contains instructions in SKILL.md that mandate the AI agent to download and execute a shell script from an external GitHub repository (raw.githubusercontent.com/iOfficeAI/OfficeCli) via a 'curl | bash' pattern before every use. While this is framed as a necessary installation and update mechanism for the 'officecli' tool, it represents a significant security risk by enabling arbitrary remote code execution on the host system. The broad trigger conditions in the skill description ensure this high-risk installation check is performed frequently.
能力评估
Purpose & Capability
Name/description (handle .docx files) matches the CLI commands and examples in the SKILL.md: the skill expects an 'officecli' command to inspect, create, and edit .docx files. However, the registry metadata lists no required binaries or install steps, while the SKILL.md mandates installing a third-party binary (officecli) before use — a mismatch between declared requirements and runtime instructions.
Instruction Scope
The runtime instructions include a 'BEFORE YOU START' block that executes curl/PowerShell to download and run an install script from raw.githubusercontent.com and uses the GitHub API to check releases. That means the agent is explicitly instructed to fetch and execute remote code. Aside from installation, the instructions operate only on the .docx files and local document paths; they do not instruct exfiltration of unrelated files or require extra env vars. The installation step is the primary scope risk.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md executes an installer fetched via curl from https://raw.githubusercontent.com/iOfficeAI/OfficeCli/main/install.sh (and a PowerShell equivalent). Download-and-execute from a raw GitHub URL is high-risk without checksum or signature verification. The install source is a commonly-used host (raw.githubusercontent.com), but running an unverified remote script is potentially dangerous and should be treated as such. Minor inconsistencies in repo name casing (OfficeCli vs OfficeCLI) suggest sloppy maintenance.
Credentials
The skill declares no required environment variables or credentials, and SKILL.md does not request secrets or unrelated env vars. That is proportionate to the described purpose. The remaining concern is that the installer script itself (not present in the skill bundle) could request or exfiltrate credentials — this cannot be assessed from the skill files alone.
Persistence & Privilege
always:false (good), but the agent is allowed to invoke the skill autonomously (platform default). Combined with the instruction to install a persistent third-party binary (officecli) by downloading and executing a remote script, this increases blast radius: an autonomously-invoked agent could install/run a binary with system-level effects. The skill does not modify other skill configurations, but installing new software is a lasting change to the environment.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install officecli-docx - 安装完成后，直接呼叫该 Skill 的名称或使用
/officecli-docx触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- Added two new guide files: creating.md and editing.md
- Quick reference table now links to detailed guides for creating and editing documents
- No changes to commands or core functionality—documentation improvement only
v1.0.1
- Removed sample guide files: creating.md and editing.md.
- SKILL.md updated to version 1.0.23, reflecting more current officecli usage and install commands.
- Some references to removed files remain in SKILL.md (links for editing and creating), but the files themselves are no longer present.
v1.0.0
- Initial release of officecli-docx skill for interacting with .docx files.
- Supports reading, extracting, and analyzing text and structure from Word documents.
- Enables editing, creating, and updating Word files, including templates and tracked changes.
- Offers detailed inspection, querying, QA, and validation commands for professional document standards.
- Includes guidelines for document design, structure, and a comprehensive pre-delivery checklist.
元数据
常见问题
officecli-docx 是什么？
Use this skill any time a .docx file is involved -- as input, output, or both. This includes: creating Word documents, reports, letters, memos, or proposals;... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 176 次。
如何安装 officecli-docx？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install officecli-docx」即可一键安装，无需额外配置。
officecli-docx 是免费的吗？
是的，officecli-docx 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
officecli-docx 支持哪些平台？
officecli-docx 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 officecli-docx？
由 瓦砾（@iceyliu）开发并维护，当前版本 v1.0.2。
推荐 Skills