docx-typst

SUSPICIOUS. The core document-conversion purpose is coherent and there is no credential harvesting or remote data flow, but the skill uses load-time pre-execution to run an external helper from PATH/$HOME before the agent sees the content. That hidden trust expansion is unnecessary for the stated purpose and creates a meaningful local supply-chain risk even though the observed command is not overtly malicious.