docx-repair

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the docx-repair purpose and local document-processing capabilities are broadly aligned, with no sign of credential theft or off-purpose network exfiltration. However, the skill contains a load-time pre-execution command that runs an unverifiable local plugin-utils/skill-toc binary, and the referenced plugin install provenance is not established here; this makes the skill high risk despite limited evidence of malicious intent.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Oct 5, 2026, 10:37 AM
Package URL
pkg:socket/skills-sh/edwinhu%2Fworkflows%2Fdocx-repair%2F@fe71b7478510bcbc81999276996d870211b8c5045e2b45dc51f5d18cf5b41b6e