officecli-docx

The skill’s behavior is mostly coherent with its stated purpose: local .docx creation/editing, QA, PDF conversion, and artifact delivery. I found no credential harvesting, third-party API routing, stealth behavior, or dangerous pre-execution syntax. The main concern is install/execution trust: the skill depends on a preinstalled OfficeCLI binary whose public GitHub materials are only partially verifiable and do not clearly expose the full implementation or a strong release/checksum trail. That makes this suspicious from a supply-chain perspective, but not confirmed malicious.