Skip to content

docs: call out the execute_code requirement for render_format docx (v0.4.1)#6

Merged
mabry1985 merged 1 commit into
mainfrom
docs/callout-execute-code-req
Jul 22, 2026
Merged

docs: call out the execute_code requirement for render_format docx (v0.4.1)#6
mabry1985 merged 1 commit into
mainfrom
docs/callout-execute-code-req

Conversation

@mabry1985

Copy link
Copy Markdown
Member

Follow-up to #5. The render_format: docx path builds the Word file by running python-docx, which needs the execute_code plugin enabled — i.e. it depends on a code-execution capability. That requirement was documented but buried, so it read as a surprise. This surfaces it prominently, and makes the agent name it at runtime instead of silently falling back.

Why this matters

A user turning on docx shouldn't discover — after the fact — that it requires enabling arbitrary code execution. execute_code is a real trust decision; it deserves an explicit, up-front callout.

Changes

  • README — a dedicated "Native Word (.docx) export" bullet in Quick start → Optional listing the full requirement chain (cowork + execute_code + artifact + a v0.107.0+ host) with a ⚠️ execute_code runs arbitrary code — a deliberate trust decision warning; strengthened the design-decision bullet the same way.
  • job-application-assistant/SKILL.md + role-packet/SKILL.md — the render step now instructs the agent: docx needs cowork's docx skill + execute_code; if either is off, name exactly what's missing and fall back to html — never silently switch.
  • cv-guide.mdexecute_code framed as a code-execution trust decision.

Testing

14 passed, ruff clean. Docs/skill-markdown + version only. Version 0.4.0 → 0.4.1.

🤖 Generated with Claude Code

https://claude.ai/code/session_01NvgV2saY75czWLEqaNVKaq

…0.4.1)

The docx render path builds the Word file by running python-docx, which needs the
execute_code plugin enabled — a code-execution capability. That requirement was
present but buried; surface it prominently so no one hits it (or enables code
execution) by surprise.

- README: a dedicated "Native Word (.docx) export" bullet in Quick start → Optional
  that lists the requirements and flags ⚠️ execute_code runs arbitrary code (a trust
  decision); strengthened the design-decision bullet likewise.
- job-application-assistant SKILL.md + role-packet SKILL.md: the render step now tells
  the agent that docx needs cowork's docx skill + execute_code, and to NAME exactly
  what's missing and fall back to html rather than silently switching.
- cv-guide.md: execute_code framed as a code-execution trust decision.

Docs only; version 0.4.0 → 0.4.1.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NvgV2saY75czWLEqaNVKaq
@mabry1985
mabry1985 merged commit 6310c7c into main Jul 22, 2026
1 check passed
@mabry1985
mabry1985 deleted the docs/callout-execute-code-req branch July 22, 2026 17:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant