docx, pptx, xlsx skills patched against path-traversal archives
Anthropic updated its docx, pptx, and xlsx Claude Agent Skills to reject symlink and path-traversal entries during archive extraction and to add template-format support.
What it is
An update to the Office document skills inside anthropics/skills, the same repo behind Claude Agent Skills.
What it does
The commit adds support for template formats (.dotx, .potx, .xltx), consolidates shared office helper code into one module replacing a pack/unpack pipeline with explicit zip/unzip steps, and rejects symlink and path-traversal entries during extraction. It also fixes the redlining validator so it correctly compares against the original document even when there are no tracked changes.
Why it matters
Office file formats are zip archives, and a skill that unpacks them without checking entries is a classic zip-slip vector; closing that off matters more once these skills run inside agent loops that touch arbitrary user-supplied files.
How to use it
Pull the latest docx, pptx, and xlsx skill folders from the skills repo if you've vendored them locally, since the fix only applies going forward.
Claude Agent Skills: portable capability packages for Claude Code
Claude Agent Skills are portable folders of instructions, scripts, and reference docs that Claude Code loads on demand to gain one specific capability.
Claude Code 2.1.214 closes a PowerShell permission bypass
Claude Code 2.1.214 fixes four permission-check bugs, including nested-directory allow rules matching too broadly and a bypass in Windows PowerShell 5.1 sessions.
Claude Code v2.1.211: forwarded subagent text and hardened permission-preview rendering
Claude Code v2.1.211 adds a flag to forward subagent text and thinking into stream-json output and strips hidden characters attackers could use to spoof permission-approval prompts.