docx
Audited by Runlayer on Feb 23, 2026
Malicious tool definition detected
Tool: SKILL.md [1/2] Description: --- name: docx description: "Comprehensive document creation, editing, and analysis with support for tracked changes, comments, formatting preservation, and text extraction. When Claude needs to work with professional documents (.docx files) for: (1) Creating new documents, (2) Modifying or editing content, (3) Working with tracked changes, (4) Adding comments, or any other document tasks" --- # DOCX creation, editing, and analysis ## Overview A user may ask you
Tool: SKILL.md [2/2] Description: "Termination clause") - By change type (e.g., "Date changes", "Party name updates", "Legal term replacements") - By proximity (e.g., "Changes on pages 1-3", "Changes in first half of document") For each batch of related changes: **a.
Malicious tool definition detected
Tool: docx-js.md [1/3] Description: # DOCX Library Tutorial Generate .docx files with JavaScript/TypeScript.
Tool: docx-js.md [2/3] Description: children: [new TextRun("Starts at 1 again (because different reference)")] }) ] }] }); // ⚠️ CRITICAL NUMBERING RULE: Each reference creates an INDEPENDENT numbered list // - Same reference = continues numbering (1, 2, 3...
Tool: docx-js.md [3/3] Description: **ALWAYS use columnWidths array for tables** + individual cell widths for compatibility - **NEVER use unicode symbols for bullets** - always use proper numbering configuration with `LevelFormat.BULLET` constant (NOT the string "bullet") - **NEVER use for line breaks anywhere** - always use separate Paragraph elements for each line - **ALWAYS use TextRun objects within Paragraph children** - never use text property directly on Paragraph - **CRITICAL for images*
Malicious tool definition detected
Tool: ooxml.md [1/3] Description: # Office Open XML Technical Reference **Important: Read this entire document before starting.** This document covers: - [Technical Guidelines](#technical-guidelines) - Schema compliance rules and validation requirements - [Document Content Patterns](#document-content-patterns) - XML patterns for headings, lists, tables, formatting, etc.
Tool: ooxml.md [2/3] Description: → "The report is quarterly" # Original: <w:r w:rsidR="00AB12CD"><w:rPr><w:rFonts w:ascii="Calibri"/></w:rPr><w:t>The report is monthly</w:t></w:r> node = doc["word/document.xml"].get_node(tag="w:r", contains="The report is monthly") rpr = tags[0].toxml() if (tags := node.getElementsByTagName("w:rPr")) else "" replacement = f'<w:r w:rsidR="00AB12CD">{rpr}<w:t>The report is </w:t></w:r><w:del><w:r>{rpr}<w:delText>monthly</w:delText></w:r></w:del><w:ins><w:r>{rpr}<
Tool: ooxml.md [3/3] Description: to remove another author's insertions - **Every edit must be properly tracked** with `<w:ins>` or `<w:del>` tags ### Tracked Change Patterns **CRITICAL RULES**: 1.
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd [1/5]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd [2/5]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd [3/5]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd [4/5]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-chart.xsd [5/5]
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns="http://schemas.openxmlformats.org/drawingml/2006/chartDrawing" targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/chartDrawing" elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schema
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd [1/3]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd [2/3]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd [3/3]
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-lockedCanvas.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/drawingml/2006/lockedCanvas" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships"
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd [1/8]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd [2/8]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd [3/8]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd [4/8]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd [5/8]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd [6/8]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd [7/8]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-main.xsd [8/8]
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-picture.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/drawingml/2006/picture" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" elementFormDefault="qualified" targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/picture"> <xsd:import namespace="http://schemas.openxmlformats.org/drawingml/2006/main" schemaLocation="dml-m
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-spreadsheetDrawing.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns="http://schemas.openxmlformats.org/drawingml/2006/spreadsheetDrawing" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" targetNamespace="http://schemas.openxmlformats.org/drawingml/2006/spreadsheetDrawing" elementFormDefault="
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/dml-wordprocessingDrawing.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:dpct="http://schemas.openxmlformats.org/drawingml/2006/picture" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns="http://schemas.openxmlformats.o
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd [1/5]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd [2/5]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd [3/5]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd [4/5]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/pml.xsd [5/5]
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-additionalCharacteristics.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/characteristics" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/characteristics" elementFormDefault="qualified"> <xsd:complexType name="CT_AdditionalCharacteristics"> <xsd:sequence> <xsd:element name="characteristic" type="CT_Cha
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-bibliography.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/bibliography" elementFormDefault="qualified"> <xsd:import namespace="http://schemas.openxmlformats.org/of
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-commonSimpleTypes.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" elementFormDefault="qualified"> <xsd:simpleType name="ST_Lang"> <xsd:restriction base="xsd:string"/> </xsd:simpleType> <xsd:simpleType name="ST_HexColorRGB"> <xsd:r
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlDataProperties.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/customXml" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/customXml" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all"> <
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-customXmlSchemaProperties.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/schemaLibrary/2006/main" targetNamespace="http://schemas.openxmlformats.org/schemaLibrary/2006/main" attributeFormDefault="qualified" elementFormDefault="qualified"> <xsd:complexType name="CT_Schema"> <xsd:attribute name="uri" type="xsd:string" default=""/> <xsd:attribute
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesCustom.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/custom-properties" xmlns:vt="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/custom-p
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesExtended.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/extended-properties" xmlns:vt="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/extended-properties" elementFormDefault="qualified" blockDefault="#all"> <xsd:im
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesVariantTypes.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes" blockDefault="#all" elementFormDefault="qualified"> <xsd:import names
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-math.xsd [1/2]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-math.xsd [2/2]
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/shared-relationshipReference.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.openxmlformats.org/officeDocument/2006/relationships" xmlns:r="http://schemas.openxmlformats.org/officeDocument/2006/relationships" elementFormDefault="qualified" targetNamespace="http://schemas.openxmlformats.org/officeDocument/2006/relationships" blockDefault="#all"> <xsd:simpleType name="ST_R
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [1/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [2/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [3/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [4/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [5/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [6/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [7/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [8/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [9/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [10/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [11/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [12/13]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/sml.xsd [13/13]
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-main.xsd [1/2]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-main.xsd [2/2]
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-officeDrawing.xsd [1/2]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-officeDrawing.xsd [2/2]
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-presentationDrawing.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="urn:schemas-microsoft-com:office:powerpoint" targetNamespace="urn:schemas-microsoft-com:office:powerpoint" elementFormDefault="qualified" attributeFormDefault="unqualified">
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-spreadsheetDrawing.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="urn:schemas-microsoft-com:office:excel" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" targetNamespace="urn:schemas-microsoft-com:office:excel" elementFormDefault="qualified" attributeFormDefault="unqualified"> <xsd:import namespace="http://schemas.openxmlformats.org/officeDocument/2006/
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/vml-wordprocessingDrawing.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="urn:schemas-microsoft-com:office:word" targetNamespace="urn:schemas-microsoft-com:office:word" elementFormDefault="qualified" attributeFormDefault="unqualified"> <xsd:element name="bordertop" type="CT_Border"/> <xsd:element name="borderleft" type="CT_Border"/> <xsd:element name="borderright" type="CT_Border"/> <x
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [1/9]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [2/9]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [3/9]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [4/9]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [5/9]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [6/9]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [7/9]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [8/9]
Tool: ooxml/schemas/ISO-IEC29500-4_2016/wml.xsd [9/9]
Malicious tool definition detected
Tool: ooxml/schemas/ISO-IEC29500-4_2016/xml.xsd Description: <?xml version='1.0'?> <xs:schema targetNamespace="http://www.w3.org/XML/1998/namespace" xmlns:xs="http://www.w3.org/2001/XMLSchema" xml:lang="en"> <xs:annotation> <xs:documentation> See http://www.w3.org/XML/1998/namespace.html and http://www.w3.org/TR/REC-xml for information about this namespace. This schema document describes the XML namespace, in a form suitable for import by other schema documents.
Malicious tool definition detected
Tool: ooxml/schemas/ecma/fouth-edition/opc-contentTypes.xsd Description: <?xml version="1.0" encoding="UTF-8" standalone="no"?> <xs:schema xmlns="http://schemas.openxmlformats.org/package/2006/content-types" xmlns:xs="http://www.w3.org/2001/XMLSchema" targetNamespace="http://schemas.openxmlformats.org/package/2006/content-types" elementFormDefault="qualified" attributeFormDefault="unqualified" blockDefault="#all"> <xs:element name="Types" type="CT_Types"/> <xs:element name="Default" type="CT_Def
Malicious tool definition detected
Tool: ooxml/schemas/ecma/fouth-edition/opc-coreProperties.xsd Description: <?xml version="1.0" encoding="UTF-8"?> <xs:schema targetNamespace="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" xmlns="http://schemas.openxmlformats.org/package/2006/metadata/core-properties" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" elementFormDefault="qualified" blockDefault="#all"> <xs:import namespace="h
Malicious tool definition detected
Tool: ooxml/schemas/ecma/fouth-edition/opc-digSig.xsd Description: <?xml version="1.0" encoding="UTF-8"?> <xsd:schema xmlns="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:xsd="http://www.w3.org/2001/XMLSchema" targetNamespace="http://schemas.openxmlformats.org/package/2006/digital-signature" elementFormDefault="qualified" attributeFormDefault="unqualified" blockDefault="#all"> <xsd:element name="SignatureTime" type="CT_SignatureTime"/> <xsd:element name="RelationshipRef
Malicious tool definition detected
Tool: ooxml/schemas/ecma/fouth-edition/opc-relationships.xsd Description: <?xml version="1.0" encoding="UTF-8" standalone="no"?> <xsd:schema xmlns="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:xsd="http://www.w3.org/2001/XMLSchema" targetNamespace="http://schemas.openxmlformats.org/package/2006/relationships" elementFormDefault="qualified" attributeFormDefault="unqualified" blockDefault="#all"> <xsd:element name="Relationships" type="CT_Relationships"/> <xsd:element name="
Malicious tool definition detected
Tool: ooxml/schemas/mce/mc.xsd Description: <?xml version="1.0" encoding="utf-8"?> <xsd:schema xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <!-- This XSD is a modified version of the one found at: https://github.com/plutext/docx4j/blob/master/xsd/mce/markup-compatibility-2006-MINIMAL
Malicious tool definition detected
Tool: ooxml/schemas/microsoft/wml-2010.xsd [1/2]
Tool: ooxml/schemas/microsoft/wml-2010.xsd [2/2]
Malicious tool definition detected
Tool: ooxml/schemas/microsoft/wml-2012.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2012/wordml" targetNamespace="http://schemas.microsoft.com/office/word/2012/wordml"> <xsd:import id="w12"
Malicious tool definition detected
Tool: ooxml/schemas/microsoft/wml-2018.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2018/wordml" targetNamespace="http://schemas.microsoft.com/office/word/2018/wordml"> <xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessingml/2006/main" sch
Malicious tool definition detected
Tool: ooxml/schemas/microsoft/wml-cex-2018.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:s="http://schemas.openxmlformats.org/officeDocument/2006/sharedTypes" xmlns:w16="http://schemas.microsoft.com/office/word/2018/wordml" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2018/wordml/cex" targetNamespace="http:
Malicious tool definition detected
Tool: ooxml/schemas/microsoft/wml-cid-2016.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2016/wordml/cid" targetNamespace="http://schemas.microsoft.com/office/word/2016/wordml/cid"> <xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessingml/20
Malicious tool definition detected
Tool: ooxml/schemas/microsoft/wml-sdtdatahash-2020.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2020/wordml/sdtdatahash" targetNamespace="http://schemas.microsoft.com/office/word/2020/wordml/sdtdatahash">
Malicious tool definition detected
Tool: ooxml/schemas/microsoft/wml-symex-2015.xsd Description: <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:w12="http://schemas.openxmlformats.org/wordprocessingml/2006/main" elementFormDefault="qualified" attributeFormDefault="qualified" blockDefault="#all" xmlns="http://schemas.microsoft.com/office/word/2015/wordml/symex" targetNamespace="http://schemas.microsoft.com/office/word/2015/wordml/symex"> <xsd:import id="w12" namespace="http://schemas.openxmlformats.org/wordprocessin
Malicious tool definition detected
Tool: ooxml/scripts/pack.py Description: #!/usr/bin/env python3 """ Tool to pack a directory into a .docx, .pptx, or .xlsx file with XML formatting undone.
Malicious tool definition detected
Tool: ooxml/scripts/unpack.py Description: #!/usr/bin/env python3 """Unpack and format XML contents of Office files (.docx, .pptx, .xlsx)""" import random import sys import defusedxml.minidom import zipfile from pathlib import Path # Get command line arguments assert len(sys.argv) == 3, "Usage: python unpack.py <office_file> <output_dir>" input_file, output_dir = sys.argv[1], sys.argv[2] # Extract and format
Malicious tool definition detected
Tool: ooxml/scripts/validate.py Description: #!/usr/bin/env python3 """ Command line tool to validate Office document XML files against XSD schemas and tracked changes.
Malicious tool definition detected
Tool: ooxml/scripts/validation/__init__.py Description: """ Validation modules for Word document processing.
Malicious tool definition detected
Tool: ooxml/scripts/validation/base.py [1/4] Description: """ Base validator with common validation logic for document files.
Tool: ooxml/scripts/validation/base.py [2/4] Description: all_files.append(file_path.resolve()) # Track all files that are referenced by any .rels file all_referenced_files = set() if self.verbose: print( f"Found {len(rels_files)} .rels files and {len(all_files)} target files" ) # Check each .rels file for rels_file in rels_files: try: # Parse relationships file rels_root = lxml.etree.parse(str(rels_file)).getroot() # Get the directory where this .rels file is located rels_dir = rels_file.parent
Tool: ooxml/scripts/validation/base.py [3/4] Description: for f in all_files if f.is_file()] # Check all XML files for Override declarations for xml_file in self.xml_files: path_str = str(xml_file.relative_to(self.unpacked_dir)).replace( "\\", "/" ) # Skip non-content files if any( skip in path_str for skip in [".rels", "[Content_Types]", "docProps/", "_rels/"] ): continue try: root_tag = lxml.etree.parse(str(xml_file)).getroot().tag root_name = root_tag.split("}")[-1] if "}" in root_tag else ro
Tool: ooxml/scripts/validation/base.py [4/4] Description: error messages from the original file """ import tempfile import zipfile # Resolve both paths to handle symlinks (e.g., /var vs /private/var on macOS) xml_file = Path(xml_file).resolve() unpacked_dir = self.unpacked_dir.resolve() relative_path = xml_file.relative_to(unpacked_dir) with tempfile.TemporaryDirectory() as temp_dir: temp_path = Path(temp_dir) # Extract original file with zipfile.ZipFile(self.original_file, "r") as zip_ref: zip_
Malicious tool definition detected
Tool: ooxml/scripts/validation/docx.py Description: """ Validator for Word document XML files against XSD schemas.
Malicious tool definition detected
Tool: ooxml/scripts/validation/pptx.py [1/2]
Tool: ooxml/scripts/validation/pptx.py [2/2]
Malicious tool definition detected
Tool: ooxml/scripts/validation/redlining.py Description: """ Validator for tracked changes in Word documents.
Malicious tool definition detected
Tool: scripts/__init__.py
Malicious tool definition detected
Tool: scripts/document.py [1/4] Description: #!/usr/bin/env python3 """ Library for working with Word documents: comments, tracked changes, and editing.
Tool: scripts/document.py [2/4] Description: in list(run.getElementsByTagName("w:t")): del_text = self.dom.createElement("w:delText") if t_elem.firstChild: del_text.appendChild(t_elem.firstChild.cloneNode(False)) for i in range(t_elem.attributes.length): attr = t_elem.attributes.item(i) del_text.setAttribute(attr.name, attr.value) t_elem.parentNode.replaceChild(del_text, t_elem) # Move all children from ins to del wrapper while ins_elem.firstChild: del_wrapper.appendChild(ins_elem.firstChild) #
Tool: scripts/document.py [3/4] Description: = Path(unpacked_dir) if not self.original_path.exists() or not self.original_path.is_dir(): raise ValueError(f"Directory not found: {unpacked_dir}") # Create temporary directory with subdirectories for unpacked content and baseline self.temp_dir = tempfile.mkdtemp(prefix="docx_") self.unpacked_path = Path(self.temp_dir) / "unpacked" shutil.copytree(self.original_path, self.unpacked_path) # Pack original directory into temporary .docx for validation ba
Tool: scripts/document.py [4/4] Description: '<Override PartName="/word/people.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.people+xml"/>' editor.append_to(root, override_xml) def _add_relationship_for_people(self, path): """Add people.xml relationship to document.xml.rels if not already present.""" editor = self["word/_rels/document.xml.rels"] if self._has_relationship(editor, "people.xml"): return root = editor.dom.documentElement root_tag = root.tagName # t
Malicious tool definition detected
Tool: scripts/templates/comments.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
Malicious tool definition detected
Tool: scripts/templates/commentsExtended.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
Malicious tool definition detected
Tool: scripts/templates/commentsExtensible.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
Malicious tool definition detected
Tool: scripts/templates/commentsIds.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
Malicious tool definition detected
Tool: scripts/templates/people.xml Description: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
Malicious tool definition detected
Tool: scripts/utilities.py [1/2] Description: #!/usr/bin/env python3 """ Utilities for editing OOXML documents.
Tool: scripts/utilities.py [2/2] Description: the next available rId for relationships files.""" max_id = 0 for rel_elem in self.dom.getElementsByTagName("Relationship"): rel_id = rel_elem.getAttribute("Id") if rel_id.startswith("rId"): try: max_id = max(max_id, int(rel_id[3:])) except ValueError: pass return f"rId{max_id + 1}" def save(self): """ Save the edited XML back to the file.