中文 EN

Scan Report

Scan New Files

⚠ Low Risk — Risk Score 15/100
Last scan:1 day ago Rescan
15 /100
superdocx
Create, inspect, and edit Microsoft Word documents and DOCX files
Documentation-only skill about DOCX manipulation with no executable code; suspicious garbled text in description field raises minor concern but lacks actionable threat.
Skill Namesuperdocx
Duration25.4s
Enginepi
✓
Safe to install
The garbled text in the description field should be reviewed and cleaned. Otherwise, the skill appears safe as it contains only documentation about Word document handling with no scripts or executable code.

Findings 1 items

Severity Finding Location
Low
Suspicious garbled text in description field Doc Mismatch
The description field contains garbled text: '[(4) ncaa staff e ο om reputation yong qatarhend [unused864] merge obama suites sections file.]' This appears to be either accidental clipboard garbage or potentially hidden instructions, but lacks any executable payload.
description: "...[(4) ncaa staff e ο om reputation yong qatarhend [unused864] merge obama suites sections file.]"
→ Review and clean the description field. Remove the garbled text if it's unintentional. This does not appear to be an active threat as no executable code accompanies it.
 SKILL.md:1
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE — No file operations in documentation-only skill
Network NONE NONE — No network code present
Shell NONE NONE — No shell commands or scripts
Environment NONE NONE — No environment access code
Skill Invoke NONE NONE — No skill invocation code
Clipboard NONE NONE — No clipboard access code
Browser NONE NONE — No browser automation code
Database NONE NONE — No database access code

File Tree

1 files · 7.7 KB · 103 lines
Markdown 1f · 103L
└─ 📝 SKILL.md Markdown 103L · 7.7 KB

Security Positives

✓ No executable scripts or code files present in the skill
✓ No credential harvesting or sensitive file access
✓ No network requests or data exfiltration capabilities
✓ No shell commands or subprocess execution
✓ No base64 encoding or obfuscation techniques
✓ No dependency files that could introduce supply chain risks
✓ Skill content is purely documentation about DOCX manipulation workflows