Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/desirecore/market/docxnpx skills add desirecore/market --skill docxgit clone --depth 1 https://github.com/desirecore/marketWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/desirecore/market/docx)<a href="https://agentmods.dev/skills/desirecore/market/docx"><img src="https://agentmods.dev/badge/skills/desirecore/market/docx.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00203 | $0.07826 |
| Opus 5 | $0.00102 | $0.03913 |
| Sonnet 5 | $0.00041 | $0.01565 |
| Haiku 4.5 | $0.00020 | $0.00783 |
Grade B, and why
docx scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- **Linux (Debian/Ubuntu)**: `sudo apt install python3 python3-pip` How it starts
The opening of the file, as written. The whole thing — 634 lines — stays where its author put it; the contents beside it link to each section on GitHub.
docx Skill
L0: One-line Summary
Create, edit, and process Word documents (.docx), with end-to-end support for creation, XML editing, and format validation.
L1: Overview and Use Cases
Capability
docx is a Procedural Skill that provides full processing capabilities for Word documents. It supports creating new documents via docx-js (Node.js), editing existing documents by unpacking and modifying XML, plus format validation and PDF conversion.
Use Cases
- The user needs to create a new Word document (report, memo, contract, letter, etc.)
- The user needs to edit an existing .docx file (modify content, add comments, track changes)
- The user needs to extract text or table data from a .docx file
- The user needs to perform document format conversion (.doc → .docx, .docx → PDF)
L2: Detailed Specification
Script Path Rule (mandatory)
The Python scripts bundled with this skill live inside the skill installation directory. You MUST use full paths when invoking them — never use bare relative paths.
The skill directory is provided by the <skill-dir> tag in the context. Always run the office Python scripts through the cross-platform launcher scripts/with-deps.py, so they reuse the runtime-preinstalled libraries (defusedxml, and lxml for full validation) with no pip install. The launcher is pure Python and behaves identically on macOS / Linux / Windows — it does NOT require bash:
python "<skill-dir>/scripts/with-deps.py" office/unpack.py document.docx unpacked/
python "<skill-dir>/scripts/with-deps.py" office/pack.py unpacked/ output.docx
The launcher runs the target script under a runtime-bundled Python that has lxml/defusedxml preinstalled, and falls back to the system python3 if that bundled Python is unavailable (in which case full XSD validation is skipped gracefully). The script path is relative to scripts/ (e.g. office/unpack.py, comment.py).
NEVER invoke an office script with a bare relative path like python scripts/office/unpack.py — that path does not exist in the user's working directory, and it bypasses the preinstalled libraries. Always go through <skill-dir>/scripts/with-deps.py.
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- scripts/__init__.py 1 B runs code
- scripts/accept_changes.py 4.3 KB runs code
- scripts/comment.py 11 KB runs code
- scripts/office/helpers/__init__.py 0 B runs code
- scripts/office/helpers/merge_runs.py 5.4 KB runs code
- scripts/office/helpers/simplify_redlines.py 5.6 KB runs code
- scripts/office/pack.py 5.8 KB runs code
- scripts/office/schemas/ecma/fouth-edition/opc-contentTypes.xsd 1.9 KB
- scripts/office/schemas/ecma/fouth-edition/opc-coreProperties.xsd 2.5 KB
- scripts/office/schemas/ecma/fouth-edition/opc-digSig.xsd 2.8 KB
- scripts/office/schemas/ecma/fouth-edition/opc-relationships.xsd 1.3 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/dml-chart.xsd 73 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/dml-chartDrawing.xsd 6.8 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/dml-diagram.xsd 50 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/dml-lockedCanvas.xsd 624 B
- scripts/office/schemas/ISO-IEC29500-4_2016/dml-main.xsd 148 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/dml-picture.xsd 1.2 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/dml-spreadsheetDrawing.xsd 8.7 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/dml-wordprocessingDrawing.xsd 14 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/pml.xsd 82 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-additionalCharacteristics.xsd 1.2 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-bibliography.xsd 7.2 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-commonSimpleTypes.xsd 6.2 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-customXmlDataProperties.xsd 1.2 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-customXmlSchemaProperties.xsd 880 B
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesCustom.xsd 2.5 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesExtended.xsd 3.4 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-documentPropertiesVariantTypes.xsd 7.3 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-math.xsd 23 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/shared-relationshipReference.xsd 1.3 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/sml.xsd 237 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/vml-main.xsd 26 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/vml-officeDrawing.xsd 25 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/vml-presentationDrawing.xsd 535 B
- scripts/office/schemas/ISO-IEC29500-4_2016/vml-spreadsheetDrawing.xsd 5.6 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/vml-wordprocessingDrawing.xsd 3.9 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/wml.xsd 167 KB
- scripts/office/schemas/ISO-IEC29500-4_2016/xml.xsd 4.5 KB
- scripts/office/schemas/mce/mc.xsd 3.1 KB
- scripts/office/schemas/microsoft/wml-2010.xsd 26 KB
- scripts/office/schemas/microsoft/wml-2012.xsd 3.7 KB
- scripts/office/schemas/microsoft/wml-2018.xsd 901 B
- scripts/office/schemas/microsoft/wml-cex-2018.xsd 1.7 KB
- scripts/office/schemas/microsoft/wml-cid-2016.xsd 1002 B
- scripts/office/schemas/microsoft/wml-sdtdatahash-2020.xsd 600 B
- scripts/office/schemas/microsoft/wml-symex-2015.xsd 745 B
- scripts/office/soffice.py 5.5 KB runs code
- scripts/office/unpack.py 4.3 KB runs code
- scripts/office/validate.py 4.6 KB runs code
- scripts/office/validators/__init__.py 336 B runs code
- scripts/office/validators/base.py 32 KB runs code
- scripts/office/validators/docx.py 16 KB runs code
- scripts/office/validators/pptx.py 9.6 KB runs code
- scripts/office/validators/redlining.py 8.7 KB runs code
- scripts/preload-deps.cjs 1.3 KB runs code
- scripts/templates/comments.xml 2.5 KB
- scripts/templates/commentsExtended.xml 2.5 KB
- scripts/templates/commentsExtensible.xml 2.6 KB
- scripts/templates/commentsIds.xml 2.6 KB
- scripts/templates/people.xml 115 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 634 lines · 203 tokens per session scan B 19087edf1cbe
docx is a skill published in the GitHub repository desirecore/market (2 stars, last pushed 4d ago), licensed MIT. It adds 203 tokens to every session and 7,826 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
docx
Read, create, and convert Microsoft Word (.docx) documents — extract text and tables, build reports from markdown/JSON, and export to PDF.
office-router
Route Office requests into the correct xlsx, docx, or pptx workflow, while preferring Slidev for new presentation drafts unless .pptx is explicitly required.
docx-edit
Edit or generate docx files using paragraph-oriented V1 office tools first, then escalate to python-docx scripts for richer document structure.
cf:docx
Create, edit, analyze .docx Word documents. Use for document creation, tracked changes, comments, formatting preservation, text extraction, template modification.
docx
Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files). Covers polished document output, tracked changes, comments, image updates, XML-level repairs, and safe conversion workflows.
document-converter
Convert Office documents (PPTX, DOCX, XLSX, PDF, HTML, CSV, JSON, XML, images) to Markdown using Microsoft MarkItDown. Provides the agent with conversion strategies for academic and research workflows.