Agent Economy ReportAgent Economy ReportCAUTION version 1.0.2 · audited 2026-09-17
This package is a local Word document utility. It installs Python dependencies and runs a CLI that can generate a .docx report template and apply formatting to an existing .docx. The advertised description also mentions Excel and PowerPoint, but the actual code and dependency list only support Word .docx operations. Setup creates a virtual environment, upgrades pip, and installs python-docx and lxml from the requirements file. No credential access, payment handling, persistence outside the skill folder, hidden network destinations, or instruction-override text was observed. The main review points are the normal dependency install process and the mismatch between the advertised suite and the Word-only implementation.
| Declared purpose | SKILL.md says the skill is an 'Advanced suite for creating, editing, and analyzing Microsoft Office documents (Word, Excel, PowerPoint)' and provides specialized tools for automated reporting and document management. skill-card.md narrows this to creating Word .docx report templates and applying document styling through a local Python CLI. |
| Observed behavior | ods.py provides two argparse commands: 'template-report' creates a Dutch .docx template with page layout, header/footer/page numbers, and predefined styles; 'style-doc' opens an existing .docx, applies the same layout and styles, and saves to an output path. setup.sh creates .venv, upgrades pip, and installs requirements.txt. The code does not make direct network calls, access credentials, handle payments, or configure persistence beyond the local Python environment. |
| Verdict, rules only | SAFE |
| Verdict, AI | CAUTION |
| Final verdict | CAUTION (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| shell | needed | setup.sh is a bash script that creates a virtual environment and installs Python packages; ods.py is a Python CLI intended to be run by the agent or user. |
| install_packages | needed | setup.sh runs 'python -m pip install --upgrade pip' and 'python -m pip install -r requirements.txt'; requirements.txt lists python-docx>=1.1.2 and lxml>=5.3.0. |
| network | needed | Package installation via pip normally contacts the configured Python package index to download python-docx and lxml. The code itself has no direct network calls. |
| filesystem_write | needed | ods.py saves generated or restyled .docx files with doc.save(); setup.sh writes a .venv directory in the skill folder. |
| filesystem_read | needed | The 'style-doc' command reads an existing .docx via Document(input_file) in ods.py. |
| severity | finding |
|---|---|
| low | Advertised scope exceeds implementation The SKILL.md description claims Word, Excel, and PowerPoint support, but the only implementation file is a Word .docx CLI. SKILL.md:3 description: Advanced suite for creating, editing, and analyzing Microsoft Office documents (Word, Excel, PowerPoint). Provides specialized tools for automated |
| low | Dependency list mismatch SKILL.md says the skill requires openpyxl and python-pptx, but requirements.txt does not install them and ods.py does not import them. SKILL.md:10 "pip": ["python-docx", "openpyxl", "python-pptx"] |
| info | Python dependency requirements.txt installs python-docx>=1.1.2, which is consistent with the .docx functionality implemented by ods.py. requirements.txt:1 python-docx>=1.1.2 |
| low | Pip upgrade during setup Running setup.sh upgrades pip inside the new virtual environment. This is a normal but environment-modifying step. setup.sh:8 python -m pip install --upgrade pip |
| low | Installs dependencies from package index Installs requirements.txt using pip, which downloads python-docx and lxml from the configured package index. Dependencies are not exact-pinned. setup.sh:9 python -m pip install -r requirements.txt |
| info | Reads user-specified .docx file The style-doc command opens an existing .docx file to apply formatting. ods.py:131 doc = Document(input_file) |
| info | Writes .docx output The template-report command saves the generated .docx template to the output path. ods.py:126 doc.save(output) |
| info | Known limitation is disclosed The skill card itself warns that the artifact only implements Word .docx workflows despite the broader public description. skill-card.md:24 Risk: The public skill description claims Word, Excel, and PowerPoint support, while the artifact implementation only provides Word .docx template and styling c |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| clawhub.ai | not in the service index | skill-card.md:9 |
| Binaries invoked | bash, pip, python, python3 |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 0 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
SKILL.md | 32 | ed178a8658f98b34… |
_meta.json | 6 | 23c1261d47257bce… |
ods.py | 166 | 68fb99b8e91331b0… |
requirements.txt | 2 | 20afdc7b8503c8bb… |
setup.sh | 13 | e149b9f9e13e9dd8… |
skill-card.md | 55 | ff8c5020b2b5df61… |
For agents
JSON: https://agenteconomy.report/k/office-document-specialist-suite.audit.json · badge: https://agenteconomy.report/k/office-document-specialist-suite.audited.svg ·
skill rating: /k/office-document-specialist-suite · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).