Skip to content
Back to skills

Doc Processor

BSecurity

Generate and parse office documents — PDF, DOCX, XLSX, PPTX, CSV. Use when creating reports, exporting tabular data, or processing uploaded office files. NOT for project documentation (use docs).

  • 86 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added September 11, 2026
businessjavascriptpythonjavabashnodedocumentation

Security analysis

B84/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned September 11, 2026

npx -y skills add Rune-kit/rune --skill doc-processor --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Doc Processor?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Doc Processor
[![Security: B — Skills Directory](https://www.skillsdirectory.com/api/skills/rune-kit-doc-processor/badge)](https://www.skillsdirectory.com/skills/rune-kit-doc-processor)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: doc-processor
description: "Generate and parse office documents — PDF, DOCX, XLSX, PPTX, CSV. Use when creating reports, exporting tabular data, or processing uploaded office files. NOT for project documentation (use docs)."
metadata:
  author: runedev
  version: "0.2.0"
  layer: L3
  model: sonnet
  group: utility
  tools: "Read, Write, Edit, Bash, Glob, Grep"
---

# doc-processor

## Purpose

Document format utility. Generates and parses office documents (PDF, DOCX, XLSX, PPTX, CSV). Pure utility — no business logic, just format handling. Other skills call doc-processor when they need to produce or consume structured documents.

## Triggers

- Called by `docs` when export to PDF/DOCX is requested
- Called by `marketing` for generating PDF reports, PPTX presentations
- Called by Rune Pro packs for business document generation
- `/rune doc-processor generate <format> <source>` — manual document generation
- `/rune doc-processor parse <file>` — manual document parsing

## Calls (outbound)

None — pure L3 utility. Receives content, produces formatted output.

## Called By (inbound)

- `docs` (L2): export documentation to PDF/DOCX
- `marketing` (L2): generate PDF reports, PPTX pitch decks
- Rune Pro packs: business document generation (invoices, proposals, reports)
- User: `/rune doc-processor` direct invocation

## Format Reference

### Supported Formats

| Format | Generate | Parse | Node.js Library | Python Library |
|--------|----------|-------|-----------------|----------------|
| PDF | Yes | Yes (via the runtime's document/PDF reader) | jsPDF, Puppeteer (HTML→PDF) | reportlab, weasyprint |
| DOCX | Yes | Yes | docx (officegen) | python-docx |
| XLSX | Yes | Yes | ExcelJS | openpyxl |
| PPTX | Yes | Yes | pptxgenjs | python-pptx |
| CSV | Yes | Yes | Built-in (fs + string ops) | Built-in (csv module) |
| HTML | Yes | Yes | Built-in | Built-in |

### Library Selection

Detect project language from context:
- If Node.js project → use Node.js libraries
- If Python project → use Python libraries
- If unclear → default to Node.js (wider ecosystem)
- For HTML→PDF → prefer Puppeteer (best fidelity) or weasyprint (Python)

## Executable Steps

### Generate Mode

#### Step 1 — Determine Format and Template

Identify:
- Target format (PDF, DOCX, XLSX, PPTX, CSV)
- Content source (markdown, data object, template + data)
- Styling requirements (brand colors, fonts, layout)
- Output path

#### Step 2 — Select Generation Strategy

| Source | Target | Strategy |
|--------|--------|----------|
| Markdown → PDF | HTML intermediate | Render MD → HTML → Puppeteer → PDF |
| Markdown → DOCX | Direct conversion | Parse MD → docx library → DOCX |
| Data → XLSX | Direct write | Map data to sheets/cells → ExcelJS |
| Slides → PPTX | Template + data | Build slides from content → pptxgenjs |
| Data → CSV | Direct write | Serialize rows → CSV string → file |
| Any → HTML | Direct render | Template engine → HTML file |

#### Step 3 — Generate Code

Produce the generation script:

**PDF from Markdown:**
```javascript
// Strategy: Markdown → HTML → Puppeteer → PDF
const puppeteer = require('puppeteer');
const { marked } = require('marked');

async function generatePDF(markdownContent, outputPath, options = {}) {
  const html = `
    <!DOCTYPE html>
    <html>
    <head><style>${options.css || defaultCSS}</style></head>
    <body>${marked(markdownContent)}</body>
    </html>
  `;
  const browser = await puppeteer.launch();
  const page = await browser.newPage();
  await page.setContent(html, { waitUntil: 'networkidle0' });
  await page.pdf({ path: outputPath, format: 'A4', margin: { top: '1in', bottom: '1in', left: '1in', right: '1in' } });
  await browser.close();
}
```

**XLSX from Data:**
```javascript
const ExcelJS = require('exceljs');

async function generateXLSX(data, outputPath, options = {}) {
  const workbook = new ExcelJS.Workbook();
  const sheet = workbook.addWorksheet(options.sheetName || 'Sheet1');
  if (data.length > 0) {
    sheet.columns = Object.keys(data[0]).map(key => ({ header: key, key, width: 20 }));
    data.forEach(row => sheet.addRow(row));
    // Style header row
    sheet.getRow(1).font = { bold: true };
    sheet.getRow(1).fill = { type: 'pattern', pattern: 'solid', fgColor: { argb: 'FFE0E0E0' } };
  }
  await workbook.xlsx.writeFile(outputPath);
}
```

**PPTX from Slides:**
```javascript
const PptxGenJS = require('pptxgenjs');

function generatePPTX(slides, outputPath, options = {}) {
  const pptx = new PptxGenJS();
  pptx.author = options.author || 'Generated by Rune';
  slides.forEach(slide => {
    const s = pptx.addSlide();
    if (slide.title) s.addText(slide.title, { x: 0.5, y: 0.5, fontSize: 28, bold: true });
    if (slide.body) s.addText(slide.body, { x: 0.5, y: 1.5, fontSize: 16 });
    if (slide.bullets) s.addText(slide.bullets.map(b => ({ text: b, options: { bullet: true } })), { x: 0.5, y: 1.5, fontSize: 16 });
  });
  return pptx.writeFile({ fileName: outputPath });
}
```

#### Step 4 — Execute and Verify

Run the generation script. Verify:
- Output file exists and is non-empty
- File can be opened (basic format validation)
- Content matches expected structure

### Parse Mode

#### Step 1 — Detect Format

Identify file format from extension and MIME type.

#### Step 2 — Extract Content

| Format | Extraction Strategy |
|--------|-------------------|
| PDF | Use the runtime's native document/PDF reader when available; otherwise use a supported PDF parsing library |
| DOCX | docx library → extract text, tables, images |
| XLSX | ExcelJS → extract sheets, rows, formulas |
| PPTX | pptxgenjs → extract slides, text, notes |
| CSV | Built-in parser → structured data |

#### Step 3 — Structure Output

Return parsed content as structured data:
```json
{
  "format": "xlsx",
  "sheets": [
    {
      "name": "Sheet1",
      "headers": ["Name", "Email", "Role"],
      "rows": [["Alice", "alice@co.com", "Engineer"], ...],
      "rowCount": 100
    }
  ]
}
```

## Output Format

### Generate Mode Output
- Generated document file at specified output path
- Verification report: file exists, non-empty, format valid

```
Document Generated:
- Format: [PDF/DOCX/XLSX/PPTX/CSV]
- Path: [output file path]
- Size: [file size]
- Strategy: [e.g., Markdown → HTML → Puppeteer → PDF]
- Status: verified ✓
```

### Parse Mode Output
Structured JSON returned to calling skill:

```json
{
  "format": "xlsx",
  "metadata": { "author": "...", "created": "..." },
  "content": {
    "sheets": [
      {
        "name": "Sheet1",
        "headers": ["Col1", "Col2"],
        "rows": [["val1", "val2"]],
        "rowCount": 100
      }
    ]
  }
}
```

Format-specific fields: `sheets` (XLSX), `pages` (PDF/DOCX), `slides` (PPTX), `rows` (CSV).

## Constraints

1. MUST verify output file exists and is non-empty after generation
2. MUST handle missing libraries gracefully — suggest `npm install` / `pip install` if not found
3. MUST NOT embed secrets or sensitive data in generated documents
4. MUST preserve formatting fidelity — generated docs should look professional
5. Parse mode MUST handle malformed files gracefully — report errors, don't crash
6. MUST use appropriate library for each format — don't force one library for all formats

## Sharp Edges

| Failure Mode | Severity | Mitigation |
|---|---|---|
| Library not installed in project | HIGH | Check package.json/requirements.txt, suggest install command |
| PDF generation fails without headless browser | HIGH | Puppeteer needs chromium — suggest alternative (jsPDF) if unavailable |
| XLSX with formulas not evaluated | MEDIUM | Use ExcelJS formula support, warn if complex formulas |
| Large file generation runs out of memory | MEDIUM | Stream large datasets instead of loading all at once |
| Generated file is empty or corrupt | HIGH | Step 4 verification catches this — retry or report |

## Done When

### Generate Mode
- Target format and source identified
- Generation strategy selected
- Code produced and executed
- Output file verified (exists, non-empty, valid format)

### Parse Mode
- File format detected
- Content extracted to structured data
- Output returned in consistent JSON format

## Cost Profile

~1000-3000 tokens input, ~500-2000 tokens output. Sonnet — document processing requires understanding format libraries and generating correct code, but not deep reasoning.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.