docx-skills@0.10.2
VERIFIED· install onlyPublisher claims: "一个 npm 包装好两个 agent skill：把工程资料整理成 spec/PRD 结构 + 模板观感的 Word .docx，并给出可审计台账。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher tanlinfeng · publishing for 17 daysInstalls 272Last detonated 4d ago
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-10 and scored it 82/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
MEDIUM
File type combined with upload actiondist/docx-skills/payload/core/scripts/run.py:1121 · File type combined with upload action — agent may exfiltrate local data files
AST07f"缺少 {work}/meta.json；重新运行 scripts/run.py prepare --input <源> --work {work}",Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/skills/spec-docx-gen/SKILL.md:823 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @tanlinfeng/docx-skills doctor --skill spec # 自检 Node / Python / bootstrap 运行环境 / 模板资产Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/skills/spec-docx-gen/SKILL.md:824 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @tanlinfeng/docx-skills status --skill spec # 查看各 agent 是否可见Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
Python subprocess execution detecteddist/docx-skills/payload/core/scripts/run.py:702 · Python subprocess execution detected
AST05proc = subprocess.run(cmd, text=True, capture_output=True, timeout=15)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detecteddist/docx-skills/payload/core/scripts/mermaid.py:248 · Python subprocess execution detected
AST05proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/bin/cli.js:24 · npx invocation of non-well-known package — may execute untrusted code
AST06npx ${pkg} doctor [--skill …] 自检 Node / Python / uv / python-docx / 两个模板包Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/bin/cli.js:142 · npx invocation of non-well-known package — may execute untrusted code
AST06log(`安装：npx ${packageInfo().name} [--skill all|spec|prd]`);Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/core/scripts/mermaid.py:22 · npx invocation of non-well-known package — may execute untrusted code
AST06``npx -y @mermaid-js/mermaid-cli``（需要联网下载）；``--probe`` 本身**永不**联网。Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
Python subprocess execution detecteddist/docx-skills/payload/core/scripts/normalize.py:872 · Python subprocess execution detected
AST05proc = subprocess.run([exe, "-layout", str(path), "-"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/core/scripts/mermaid.py:321 · npx invocation of non-well-known package — may execute untrusted code
AST06help="缺失 mmdc 时允许用 npx 下载 @mermaid-js/mermaid-cli（默认关闭）")Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
Python subprocess execution detecteddist/docx-skills/payload/core/scripts/normalize.py:798 · Python subprocess execution detected
AST05proc = subprocess.run([exe, "-f", "html", "-t", "gfm", str(path)],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/core/scripts/mermaid.py:154 · npx invocation of non-well-known package — may execute untrusted code
AST06npx = shutil.which("npx")Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/skills/spec-docx-gen/SKILL.md:822 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @tanlinfeng/docx-skills --skill spec # 复制到 ~/.agents/skills/spec-docx-genFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/core/scripts/mermaid.py:341 · npx invocation of non-well-known package — may execute untrusted code
AST06print("[mermaid] mmdc 未安装（无 npx 降级；--allow-network 可启用 npx）")Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/skills/prd-docx-gen/SKILL.md:853 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @tanlinfeng/docx-skills --skill prd # 复制到 ~/.agents/skills/prd-docx-genFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
Python subprocess execution detecteddist/docx-skills/payload/core/scripts/run.py:394 · Python subprocess execution detected
AST05return subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detecteddist/docx-skills/payload/core/scripts/mermaid.py:139 · Python subprocess execution detected
AST05proc = subprocess.run(cmd, capture_output=True, text=True, timeout=30)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/bin/cli.js:25 · npx invocation of non-well-known package — may execute untrusted code
AST06npx ${pkg} uninstall [选项] 卸载技能Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/bin/cli.js:22 · npx invocation of non-well-known package — may execute untrusted code
AST06npx ${pkg} [install] [选项] 安装技能（默认子命令，默认装两个）Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/skills/prd-docx-gen/SKILL.md:855 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @tanlinfeng/docx-skills status --skill prdFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/skills/spec-docx-gen/SKILL.md:825 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @tanlinfeng/docx-skills uninstall --skill specFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/bin/cli.js:23 · npx invocation of non-well-known package — may execute untrusted code
AST06npx ${pkg} status [--skill …] 查看两个技能装在哪、各 agent 是否可见Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/skills/prd-docx-gen/SKILL.md:854 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @tanlinfeng/docx-skills doctor --skill prd # 自检 Node / Python / bootstrap 运行环境 / 模板资产Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
Python subprocess execution detecteddist/docx-skills/payload/core/scripts/bootstrap.py:71 · Python subprocess execution detected
AST05proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detecteddist/docx-skills/payload/core/scripts/run.py:681 · Python subprocess execution detected
AST05proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
npx invocation of non-well-known packagedist/docx-skills/payload/skills/prd-docx-gen/SKILL.md:856 · npx invocation of non-well-known package — may execute untrusted code
AST06npx @tanlinfeng/docx-skills uninstall --skill prdFix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Instructions loaded
≈17,593 tok
3 files · 41 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
No advisories in OSV for @tanlinfeng/docx-skills@0.10.2 as of 4d ago. This is the package itself, not its dependencies.