Skills Explorer Add Skills

read-docx-review

An agent skill by daymade, from daymade/claude-code-skills. Tags: code-review, documents, review, validation, word.

What it does

读取 Word/WPS 审阅后的 docx，把批注（comments）与修订（track changes）提取成可逐条裁决的 markdown 对账表或 JSON。触发场景：对方批注完的合同/协议/书稿/报告回来了要读意见；「提取 docx 批注」「审阅意见对账」「读一下修订」「谁批了什么、批在哪」；WPS 云文档/Word 在线协作 导出的审阅稿；收到带修订模式改动的回稿要看对方改了什么。核心保证：修订感知——python-docx 裸读会漏掉修订插入（w:ins）的内容、认不出整段删除（w:del），本 skill 走 OpenXML SDK 引擎 不漏。只读，不改对方文件。边界：生成/排版 docx → docx-creator 或 minimax-docx；PDF 批注不在范围。

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add daymade/claude-code-skills --skill read-docx-review

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/daymade/claude-code-skills
cp -r claude-code-skills/daymade-docs/read-docx-review ~/.claude/skills/read-docx-review

Safety box score

Grade C, moderate risk: 39 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill reads reviewed DOCX files and converts comments plus track-changes into markdown or JSON, using `dotnet-script` and OpenXML-based parser scripts. Main risks are user-level tool installation, first-run network access for NuGet restore, and execution of local csx parsing code as the current user.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution2 (moderate)`scripts/bridge_lib/docx_bridge_client.py` shells out to `dotnet-script` (`cmd = ["dotnet-script", str(script), "--", str(docx), ...]`), so it executes local parser scripts as the user.
Network access2 (moderate)`SKILL.md` says NuGet packages are restored on first run and that this "需要网络"; the parser depends on downloading `DocumentFormat.OpenXml 3.2.0`.
Filesystem reach2 (moderate)It touches home-directory locations like `~/.dotnet/tools` and `~/.nuget/packages`, and references `~/.claude/plugins/cache/...`; that reaches outside the project tree.
Secrets & credentials0 (none)The files do not request or access passwords, tokens, keychains, browser sessions, or `.env` secrets.
Privilege & persistence2 (moderate)Setup requires user-wide tooling changes such as `brew install dotnet` and `dotnet tool install -g dotnet-script`.
Instruction hijack surface0 (none)There is no instruction to bypass confirmations, hide actions, or follow remote instructions; the skill is explicitly read-only.
Irreversible actions0 (none)It only analyzes documents and prints a report; it does not send mail, publish, deploy, pay, or modify files.
Transparency2 (moderate)The real parsing logic lives in referenced `scripts/csharp/tasks/*.csx` invoked by `dotnet-script`; those scripts and their restore-time dependencies are outside the visible Python code.

Before installing

Rated 2026-10-20 by an automated review of 5 files from the skill's repository.

Source

Repository
daymade/claude-code-skills (all skills from this repository)
Path
daymade-docs/read-docx-review/SKILL.md
Branch
main
Updated
2026-09-20