Scanned skills

anthropics/skills docx

Checked the catalogued skill at docx.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 29
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 29
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
scripts/accept_changes.py
securityhigh SD-007
scripts/office/validators/base.py
securityhigh SD-007
scripts/office/validators/base.py
securityhigh SD-007
scripts/office/validators/base.py
securityhigh SD-007
scripts/office/validators/base.py
securityhigh SD-007
scripts/office/validators/base.py
securityhigh SD-007
scripts/office/validators/base.py
securityhigh SD-007
scripts/office/validators/base.py
securityhigh SD-007
scripts/office/validators/base.py
18 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/accept_changes.py

Documentation describes outbound calls; no actual code present.

securityhigh SD-007 benign_example
scripts/comment.py

Contains a static XML namespace URL, not an actual outbound network call.

securityhigh SD-007 benign_example
scripts/comment.py

Contains a static XML namespace URL, not an actual outbound network call.

securityhigh SD-007 benign_example
scripts/comment.py

Contains a static XML namespace URL, not an actual outbound network call.

securityhigh SD-007 benign_example
scripts/comment.py

Contains a static XML namespace URL, not an actual outbound network call.

securityhigh SD-007 benign_example
scripts/comment.py

Contains a static XML namespace URL, not an actual outbound network call.

securityhigh SD-007 benign_example
scripts/comment.py

Contains a static XML schema URL reference, not an executed network request.

securityhigh SD-007 benign_example
scripts/comment.py

Contains a static XML schema URL reference, not an executed network request.

securityhigh SD-007 benign_example
scripts/comment.py

Contains a static XML schema URL reference, not an executed network request.

securityhigh SD-007 benign_example
scripts/comment.py

Contains a static XML schema URL reference, not an executed network request.

securityhigh SD-007 benign_example
scripts/merge_runs.py

The string is a static XML namespace declaration, not an active network request.

securityhigh SD-007 benign_example
scripts/office/helpers/__init__.py

Static reference to a standard OpenXML schema URL, not an outbound network call.

securityhigh SD-007 benign_example
scripts/office/helpers/pptx_theme.py

The constant is a namespace URI for OpenXML themes, not an actual outbound network call.

securityhigh SD-007 benign_example
scripts/office/validate.py

The constant merely defines a namespace string and does not trigger any outbound network activity.

securityhigh SD-007 benign_example
scripts/office/validators/docx.py

Namespace URI constant for Office XML schema, not an outbound network call.

securityhigh SD-007 benign_example
scripts/office/validators/docx.py

Namespace URI constant for Office XML schema, not an outbound network call.

securityhigh SD-007 benign_example
scripts/office/validators/docx.py

Namespace URI constant for Office XML schema, not an outbound network call.

securityhigh SD-007 benign_example
scripts/office/validators/pptx.py

URL used as XML namespace, not an active network call