Security risk report for @forgecat/anthropics_skills_docx v0.0.5
Source Integrity
Low
Profile claims origin from Anthropic's official skills repository (GitHub: anthropics/skills) with commit hash and license reference.
Static scanner confirms low risk; no typosquatted dependencies, suspicious package names, or supply-chain red flags identified.
Agent Intent
Low
Content is purely technical documentation for .docx file manipulation using standard libraries (docx-js, pandoc, LibreOffice).
No instructions to ignore system prompts, exfiltrate data, read credentials, or install remote payloads.
Guidance recommends legitimate, well-known tools and standard practices (Arial fonts, DXA units, proper table widths); no poisoned knowledge or security-weakening directives.
Details
Findings
Prompt injection
skills/docx/SKILL.md · SKILL-006
Invisible characters detected
skills/docx/SKILL.md · SKILL-011
Evidence
All code examples use standard npm/Python packages with no obfuscation or attacker-controlled dependencies.
Trigger descriptions are narrow and functional (e.g., 'any mention of Word doc, .docx') with explicit exclusions ('Do NOT use for PDFs, spreadsheets, Google Docs').
No references to reading ~/.ssh, ~/.aws, .env, or transmitting outputs to external hosts.
Permissions
Low
Profile declares no tools or MCP servers; it is purely instructional documentation.
Guidance references only file I/O (read/write .docx, unpack/repack XML) and document conversion (pandoc, LibreOffice CLI) — all scoped to the stated purpose of Word document manipulation.
No shell execution, network access, or excessive agency requested beyond document processing.
Details
Evidence
No 'tools' or 'mcp_servers' sections in profile metadata.
All shell commands (pandoc, python scripts, soffice) are examples for document conversion, not arbitrary execution.
File operations are limited to .docx archives and temporary unpacking directories.
MCP Risk
Low
No MCP servers declared in the profile.
Profile is a static skill definition with embedded documentation and code examples, not a dynamic server configuration.
Details
Evidence
'mcp_servers' field is absent from profile metadata.
No external host references, binary execution directives, or credential requirements in the skill definition.
ForgeCat