D

docx-cli

kirill-klimuk/docx-cli · v0.28.0 · Agent Skills

by Kirill KlimukOwner verifiedScan grade: GoodAwesome AI Plugins

Agent skill/CLI for AI agents to work with Word documents without breaking their formatting: fill in forms, update tables, add images, restyle, write reports, and redline with tracked changes and comments

InstallSource
Follow0
Trust Score81Security scan85Components4
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is docx-cli a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Agent Skills
  • Claude Code
  • 4 skills

Before you install

Sign-in
Not declared
Declared access
Read, Write
License
MIT

Check before relying on it

What is docx-cli?

docx-cli is a published agent skills plugin for AI coding agents that works with Agent Skills and Claude Code, developed by Kirill Klimuk and distributed through the HOL AI plugin registry. Agent skill/CLI for AI agents to work with Word documents without breaking their formatting: fill in forms, update tables, add images, restyle, write reports, and redline with tracked changes and comments.

Canonical slug
kirill-klimuk/docx-cli
Version
v0.28.0 · updated Nov 2, 2026

Registry snapshot

Owner verification
Verified on HOL as @kklimuk
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
4 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
81

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
90/100
MCP server setup
100/100
Plugin Security
85/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/kklimuk/docx-cli
Source commit
22e3e2f2b4d0…
Publisher verified
Yes
Owner verified
@kklimuk
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
85
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-PtddkW / cisco-skill-scanner: failedcodex:hol-plugin-scanner-PtddkW / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

13/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

0/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

31/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

0/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumsecurityCLAUDE_FIELD_MISSING_VERSION

The Claude manifest requires a non-empty "version" string.

Add "version" to the Claude manifest.

mediumoperational-securityDEPENDENCY_LOCKFILE_MISSINGReported 2 times

package.json is present without a corresponding lockfile or pinned dependency snapshot.

Commit a lockfile or use fully pinned requirements for reproducible dependency resolution.

lowoperational-securityDEPENDABOT_MISSINGReported 2 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the docx-cli entry from the docx-cli marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall docx-cli@docx-cli.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "docx-cli",
  "version": "0.28.0",
  "description": "Let AI agents edit Word documents without breaking them: fill in forms, update tables, restyle, write reports, and redline with tracked changes and comments.",
  "author": {
    "name": "Kirill Klimuk",
    "url": "https://github.com/kklimuk"
  },
  "homepage": "https://github.com/kklimuk/docx-cli",
  "repository": "https://github.com/kklimuk/docx-cli",
  "license": "MIT",
  "keywords": [
    "docx",
    "word",
    "microsoft-word",
    "tracked-changes",
    "redline",
    "comments",
    "documents"
  ],
  "skills": "./",
  "interface": {
    "displayName": "docx-cli",
    "developerName": "Kirill Klimuk",
    "shortDescription": "Edit Word documents without breaking their formatting",
    "longDescription": "Lets Codex do real work in Word .docx files: read them as Markdown, fill in contracts and forms, update tables, restyle headings, fonts and margins, set headers, footers and page numbers, build new documents from Markdown, and review with real Word tracked changes and comments. Edits happen in place, so the file still looks like yours in Word. Runs locally with no telemetry.",
    "category": "Productivity",
    "capabilities": [
      "Read",
      "Write"
    ],
    "websiteURL": "https://github.com/kklimuk/docx-cli",
    "privacyPolicyURL": "https://github.com/kklimuk/docx-cli/blob/main/SECURITY.md#scope-and-data-handling",
    "termsOfServiceURL": "https://github.com/kklimuk/docx-cli/blob/main/LICENSE",
    "defaultPrompt": [
      "Fill in this NDA for Acme, Inc. with today's date",
      "Redline contract.docx and comment on one-sided terms",
      "Make my résumé's headings consistent, keep it to 1 page"
    ],
    "brandColor": "#1E3A5F",
    "composerIcon": "./assets/icon.png",
    "logo": "./assets/icon.png",
    "screenshots": [
      "./assets/social-preview.png"
    ]
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/kklimuk/docx-cli
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

4 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • commit

    .claude/skills/commit/SKILL.md

    Create well-structured git commits from the current working tree. Use when the user says 'commit', 'save my work', 'let's commit this', 'make a commit', or any variation of wanting to commit code to git.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • security-review

    .claude/skills/security-review/SKILL.md

    Review code for security vulnerabilities. Use when the user says 'security review', 'security audit', 'check for vulnerabilities', 'pentest the code', 'OWASP check', or any variation of wanting a security assessment.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • weak-agent-test

    .claude/skills/weak-agent-test/SKILL.md

    Run the weak-agent adversarial test harness against docx-cli. Spawns weak exercise agents (Haiku by default, Sonnet to probe, or a local agent harness's pre-produced runs) to perform real document tasks over six scenarios — five editing (MNDA form-fill + font fidelity, invoice table-edit/restructure + logo replace, résumé styling, contract redlining + commenting, contract finalize via accept/reject + comment reply/resolve) and one authoring (T. S. Eliot poetry journal: multi-column, verse, footnotes, links, figure) — renders every result with Word, has opus judge them against ground-truth rubrics, measures each exercise's tool economy, token cost, wall-clock, and correctness (from transcripts for Claude, the exercise.json ledger for the local harness), and synthesizes a prioritized ergonomics report. Use when the user says 'adversarial review', 'test docx-cli with weak agents', 'run the haiku harness', 'weak agent test', or wants to re-run yesterday's adversarial process.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • docx-cli

    skills/docx-cli/SKILL.md

    Edits, redlines, and comments on Word .docx files in place, keeping their formatting — prefer it over unzipping and hand-editing the XML. Use for tracked changes (redline, accept/reject), comments (add/reply/resolve), filling contracts/NDAs/forms, restyling headings/fonts, margins/page setup, tables, headers/footers/page numbers, footnotes, or reading a .docx as Markdown. Also builds new Word docs and reports from Markdown or code. Not for PDF, Excel, PowerPoint, Google Docs, or .doc.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/marketplace.json

file

596 bytes

6ccf806338a4a32e…

.claude-plugin/plugin.json

file

401 bytes

ed8b3c4cd90716cd…

.claude/skills/commit/SKILL.md

skill

3,513 bytes

ea6c8c801d85e5f4…

.claude/skills/security-review/SKILL.md

skill

6,988 bytes

149ce84bfad54914…

.claude/skills/weak-agent-test/scenarios/contract-finalize/criteria.md

file

2,938 bytes

a06bb31c4915f203…

.claude/skills/weak-agent-test/scenarios/contract-finalize/task.md

file

2,335 bytes

7090553d077f8ced…

.claude/skills/weak-agent-test/scenarios/contract-markup/criteria.md

file

3,696 bytes

86e4b601fd18d8a9…

.claude/skills/weak-agent-test/scenarios/contract-markup/task.md

file

3,352 bytes

6725c8ae35041622…

.claude/skills/weak-agent-test/scenarios/eliot-journal/assets/eliot-poems.md

file

1,745 bytes

4cae2b3a84faba34…

.claude/skills/weak-agent-test/scenarios/eliot-journal/assets/frontispiece.svg

file

1,465 bytes

a20fd247c2f30c72…

.claude/skills/weak-agent-test/scenarios/eliot-journal/criteria.md

file

3,254 bytes

b70458ff90717f49…

.claude/skills/weak-agent-test/scenarios/eliot-journal/task.md

file

3,265 bytes

9a43f4307364fe44…

.claude/skills/weak-agent-test/scenarios/invoice/assets/logo.svg

file

1,275 bytes

3d1e64e10171f37e…

.claude/skills/weak-agent-test/scenarios/invoice/criteria.md

file

7,058 bytes

7cf9f1021e27f73a…

.claude/skills/weak-agent-test/scenarios/invoice/task.md

file

4,733 bytes

02fd9792c321f56c…

.claude/skills/weak-agent-test/scenarios/mnda/criteria.md

file

2,146 bytes

1e2a8ec6219ebd24…

.claude/skills/weak-agent-test/scenarios/mnda/task.md

file

3,395 bytes

e7324591f7457803…

.claude/skills/weak-agent-test/scenarios/resume/criteria.md

file

3,362 bytes

79df2b69a2e8e818…

.claude/skills/weak-agent-test/scenarios/resume/task.md

file

3,928 bytes

e36e3af590069dd1…

.claude/skills/weak-agent-test/scripts/collect-exercises.ts

file

2,458 bytes

07f4d0f4abad5130…

.claude/skills/weak-agent-test/scripts/exercise-metrics.ts

file

43,081 bytes

8d65f946b7ace184…

.claude/skills/weak-agent-test/scripts/local-exercise-prompt.md

file

1,521 bytes

a9f94c8e5bf68f67…

.claude/skills/weak-agent-test/scripts/parse-local-ledger.ts

file

9,263 bytes

4404c89f885a8ac7…

.claude/skills/weak-agent-test/scripts/run-local-corpus.ts

file

15,384 bytes

415f586ef46468a5…

.claude/skills/weak-agent-test/scripts/stage-competitor.ts

file

11,330 bytes

bb0175de5829c6d6…

.claude/skills/weak-agent-test/scripts/stage-scenario.ts

file

3,511 bytes

dfab394b32b4e100…

.claude/skills/weak-agent-test/scripts/tsconfig.json

file

667 bytes

a20c838a1a2078d2…

.claude/skills/weak-agent-test/SKILL.md

skill

26,913 bytes

7136e184c44f5561…

.codex-plugin/plugin.json

plugin-manifest

1,712 bytes

6be24d2063786ebe…

assets/icon.png

asset

14,820 bytes

a7a11a6fa0476f2c…

assets/social-preview.png

asset

566,520 bytes

63b774a3c7ec6bdf…

biome.json

file

622 bytes

cab650aecc660097…

CLAUDE.md

file

43,293 bytes

c9f7086b8f589228…

LICENSE

file

1,428 bytes

999397b32c69f024…

package.json

file

2,444 bytes

cadcafa24185b358…

README.md

file

15,798 bytes

2a61a396e3060f7e…

SECURITY.md

file

11,953 bytes

ce64fbde14da2a0c…

skills/docx-cli/references/commands.md

skill

6,555 bytes

9e00ebb077ac614b…

skills/docx-cli/references/troubleshooting.md

skill

5,541 bytes

4f8e92b199eb04ee…

skills/docx-cli/scripts/bootstrap.sh

skill

9,515 bytes

a465b0e8ebd0b6f9…

skills/docx-cli/scripts/install.sh

skill

7,265 bytes

88780ceb1dabe189…

skills/docx-cli/SKILL.md

skill

9,693 bytes

d09a1093896dcbc9…

tsconfig.json

file

879 bytes

653098d47377c9f4…

docx-cli — Frequently asked questions

What is docx-cli?
docx-cli is an AI plugin in the HOL registry. Agent skill/CLI for AI agents to work with Word documents without breaking their formatting: fill in forms, update tables, add images, restyle, write reports, and redline with tracked changes and comments.
How do I install docx-cli?
Install docx-cli in your harness: Claude Code — /plugin marketplace add kklimuk/docx-cli; Any agent — npx [email protected] add kklimuk/docx-cli. Full step-by-step guidance is on the HOL plugin page.
How do I install docx-cli in HOL Guard?
To install docx-cli in HOL Guard, start with hol-guard plugin install kirill-klimuk/docx-cli --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install docx-cli in Claude Code?
To install docx-cli in Claude Code, start with /plugin marketplace add kklimuk/docx-cli. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for docx-cli computed?
docx-cli has a HOL Trust Score of 81 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/kirill-klimuk%2Fdocx-cli/trust
Who publishes docx-cli?
docx-cli is published by Kirill Klimuk and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-11-03 to 2026-11-04.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from docx-cli.

Alternatives in Agent Skills

See all Agent Skills plugins

Reviews and similar plugins