docx-comment-reply — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited docx-comment-reply (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
这个 skill 解决的问题:把 Word 文档里的批注(comments)按“原文锚点上下文”整理出来,生成待回复清单,然后把回复以 threaded replies 的方式写回到新的 .docx 文件里(不改原文件)。
适用场景:专利/论文/合同/内部评审等需要“逐条回复批注”的文档。
在当前工作目录的 outputs/ 下生成:
*_批注定位与上下文_*.md:人可读的批注+锚点上下文报告*_comment_context_*.json:机器可读上下文(用于并行写回复/自动化)*_replies_todo_*.json:待回复模板(键=comment_id,值=空字符串)*_批注已回复_*.docx:写回批注回复后的最终交付文件python scripts/extract_comment_context.py --input "path\\to\\file.docx"如果输入是 .doc,脚本会尝试用 LibreOffice soffice 转成 .docx 后继续。
outputs\\*_批注定位与上下文_*.md,逐条写回复。outputs\\*_replies_todo_*.json(保持 JSON 结构不变)。回复口径(强约束)
python scripts/apply_comment_replies.py `
--unpacked "outputs\\<xxx>_unpacked_<timestamp>" `
--replies "outputs\\<xxx>_replies_todo_<timestamp>.json" `
--author "YourName" `
--initials "YN"脚本默认会在保存时做 schema + redlining 校验;如需单独验证:
python ..\\docx\\ooxml\\scripts\\validate.py "outputs\\<unpacked_dir>" --original "outputs\\<out>.docx"当批注数量较多(例如 ≥20 条):
comment_context.json$vibe)apply_comment_replies.py~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.