docx-repair
Warn
Audited by Socket on Oct 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the docx-repair purpose and local document-processing capabilities are broadly aligned, with no sign of credential theft or off-purpose network exfiltration. However, the skill contains a load-time pre-execution command that runs an unverifiable local plugin-utils/skill-toc binary, and the referenced plugin install provenance is not established here; this makes the skill high risk despite limited evidence of malicious intent.
Confidence: 89%Severity: 72%
Audit Metadata