Docx Editor AI Agent

by superdoc• 1.1k•• Scanned•Claim this listing•Request removal
Productivity & Workflowagentagentic aicollaborativedocxdocx agent

SuperDoc - DOCX Editor and Agent SDK for reviewing, filling, and editing documents

Docx Editor is an open-source ai agent by superdoc, written mainly in TypeScript, with 1,117 GitHub stars and the AGPL-3.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit 2457e27. No capabilities flagged by our checks. Scan policy

Scanned
Full scan at 2457e27 · Nov 5, 2026
Scanned Builds
Static code scanpass
Secrets scanpass
Dependency audit343 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (87)

  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @fastify/static@8.3.0: 4 known vulnerabilities
    GHSA-83w8-p2f5-377r, GHSA-8pvw-jcv7-9cmj, GHSA-pr96-94w5-mx2h, GHSA-x428-ghpx-8j92
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    @vue/server-renderer@3.5.41: 1 known vulnerability
    GHSA-g2v6-rqmx-r4w6
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    brace-expansion@1.1.18: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    brace-expansion@5.0.9: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    fast-uri@3.1.6: 7 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-58mr-gqgx-xq4g, GHSA-hrr3-gc8f-f4qj, GHSA-qw65-cvwx-89v3, GHSA-w74x-v6f9-j3xg +2 more
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    fast-uri@4.1.3: 8 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-58mr-gqgx-xq4g, GHSA-hrr3-gc8f-f4qj, GHSA-jvvf-x445-j334, GHSA-qw65-cvwx-89v3 +3 more
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    fastify@5.12.1: 5 known vulnerabilities
    GHSA-4mh8-r7rc-xpvc, GHSA-667r-xxjv-c9mm, GHSA-9q9j-q6p8-xq58, GHSA-hwr6-493r-vm6h, GHSA-p68q-wchp-6fh7
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    nanoid@3.3.17: 1 known vulnerability
    GHSA-2v37-7h3g-55p8
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 3 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    vite@7.3.5: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    ws@8.18.3: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • medium
    @azure/msal-node@5.1.1: 1 known vulnerability
    GHSA-xcx6-jx8p-x3h5
    pnpm-lock.yaml
  • medium
    @modelcontextprotocol/sdk@1.28.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    pnpm-lock.yaml
  • medium
    @vue/server-renderer@3.5.32: 1 known vulnerability
    GHSA-g2v6-rqmx-r4w6
    pnpm-lock.yaml
  • medium
    body-parser@1.20.4: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    pnpm-lock.yaml
  • medium
    body-parser@2.2.2: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    pnpm-lock.yaml
  • medium
    brace-expansion@1.1.13: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    pnpm-lock.yaml
  • medium
    brace-expansion@2.0.3: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    pnpm-lock.yaml
  • medium
    brace-expansion@5.0.5: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    pnpm-lock.yaml
  • medium
    browserslist@4.28.1: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    pnpm-lock.yaml
  • medium
    compression@1.8.1: 1 known vulnerability
    GHSA-vc2v-76pw-4v95
    pnpm-lock.yaml
  • medium
    fast-uri@3.1.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    pnpm-lock.yaml
  • medium
    fflate@0.8.2: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    pnpm-lock.yaml
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    pnpm-lock.yaml
  • medium
    happy-dom@20.4.0: 5 known vulnerabilities
    GHSA-5fpq-26gf-qwcr, GHSA-6q6h-j7hj-3r64, GHSA-834v-8h66-3h79, GHSA-c8p4-j97h-3vg8, GHSA-w4gp-fjgq-3q4g
    pnpm-lock.yaml
  • medium
    hono@4.12.9: 32 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-54fx-42gc-7vw4 +27 more
    pnpm-lock.yaml
  • medium
    immutable@5.1.5: 2 known vulnerabilities
    GHSA-v56q-mh7h-f735, GHSA-xvcm-6775-5m9r
    pnpm-lock.yaml
  • medium
    ip-address@10.1.0: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    pnpm-lock.yaml
  • medium
    js-cookie@3.0.5: 1 known vulnerability
    GHSA-qjx8-664m-686j
    pnpm-lock.yaml
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    pnpm-lock.yaml
  • medium
    linkify-it@3.0.3: 2 known vulnerabilities
    GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
    pnpm-lock.yaml
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    pnpm-lock.yaml
  • medium
    lodash@4.17.23: 2 known vulnerabilities
    GHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
    pnpm-lock.yaml
  • medium
    lodash-es@4.17.23: 2 known vulnerabilities
    GHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
    pnpm-lock.yaml
  • medium
    markdown-it@12.3.2: 4 known vulnerabilities
    GHSA-253c-mchw-3w2r, GHSA-6v5v-wf23-fmfq, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
    pnpm-lock.yaml
  • medium
    minimatch@7.4.6: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    pnpm-lock.yaml
  • medium
    nanoid@3.3.16: 1 known vulnerability
    GHSA-2v37-7h3g-55p8
    pnpm-lock.yaml
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    react-router@7.14.0: 9 known vulnerabilities
    GHSA-2j2x-hqr9-3h42, GHSA-337j-9hxr-rhxg, GHSA-49rj-9fvp-4h2h, GHSA-84g9-w2xq-vcv6, GHSA-8x6r-g9mw-2r78 +4 more
    pnpm-lock.yaml
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    sharp@0.35.2: 2 known vulnerabilities
    GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    tmp@0.2.5: 1 known vulnerability
    GHSA-ph9p-34f9-6g65
    pnpm-lock.yaml
  • medium
    undici@6.27.0: 11 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-4qv8-2p9j-2685, GHSA-8xcm-r25x-g524, GHSA-9fm3-97px-rjf6 +6 more
    pnpm-lock.yaml
  • medium
    undici@7.24.6: 29 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-35p6-xmwp-9g52, GHSA-3xpg-4rpp-hhhm +24 more
    pnpm-lock.yaml
  • medium
    undici@7.29.0: 18 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +13 more
    pnpm-lock.yaml
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    vite@7.3.1: 10 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +5 more
    pnpm-lock.yaml
  • medium
    vite-plus@0.2.7: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    pnpm-lock.yaml
  • medium
    ws@8.20.0: 4 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    pnpm-lock.yaml
  • medium
    zod@4.1.11: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    zod@4.4.3: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    @vue/server-renderer@3.5.33: 1 known vulnerability
    GHSA-g2v6-rqmx-r4w6
    tests/consumer-typecheck/package-lock.json
  • medium
    brace-expansion@1.1.14: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    tests/consumer-typecheck/package-lock.json
  • medium
    nanoid@3.3.12: 2 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
    tests/consumer-typecheck/package-lock.json
  • medium
    postcss@8.5.13: 2 known vulnerabilities
    GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
    tests/consumer-typecheck/package-lock.json
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/docs/scripts/execute-migration-snippets.mjs:77
  • low
    esbuild@0.27.7: 2 known vulnerabilities
    GHSA-g7r4-m6w7-qqqr, GHSA-g7r4-m6w7-qqqr
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • low
    glob@11.1.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    demos/superdoc-collaboration-v2/pnpm-lock.yaml
  • low
    @babel/core@7.29.0: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    pnpm-lock.yaml
  • low
    @hono/node-server@1.19.11: 3 known vulnerabilities
    GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
    pnpm-lock.yaml
  • low
    @vitest/mocker@4.1.10: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    pnpm-lock.yaml
  • low
    ajv@8.17.1: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    pnpm-lock.yaml
  • low
    baseline-browser-mapping@2.10.12: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    pnpm-lock.yaml
  • low
    elliptic@6.6.1: 1 known vulnerability
    GHSA-848j-6mx2-7j84
    pnpm-lock.yaml
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    minimatch@10.2.3: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    minimatch@10.2.4: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    minimatch@7.4.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    pbkdf2@3.1.5: 1 known vulnerability
    GHSA-477h-4r7f-fvrx
    pnpm-lock.yaml
  • low
    postcss@8.5.22: 1 known vulnerability
    GHSA-fxqj-rqcc-2cmp
    pnpm-lock.yaml
  • low
    postcss-selector-parser@6.1.2: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    pnpm-lock.yaml
  • low
    qs@6.14.2: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
    pnpm-lock.yaml
  • low
    qs@6.15.0: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
    pnpm-lock.yaml
  • low
    vitest@4.1.10: 1 known vulnerability
    GHSA-82fw-gwwq-j7x9
    pnpm-lock.yaml
  • low
    package.json has a prepare script
    if [ -z "$CI" ] && command -v vp >/dev/null 2>&1; then vp config --no-agent; fi
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)
  • info
    Ignored the repo's scanner suppression config (1 file)
    .gitleaks.toml

Network activity

During install
github.comregistry.npmjs.orgrelease-assets.githubusercontent.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Docx Editor alternatives

View more →

Similar ai agents in Productivity & Workflow, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Docx Editor (this page)
superdoc
1.1kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
Paperclip
paperclipai
110kMITNov 1, 2026Scanned, no flagged issues
Ppt Master
hugohe3
72kMITOct 30, 2026Scanned, no flagged issues
Llama Index
run-llama
53kMITOct 26, 2026Scanned, see report
Nanobot
HKUDS
50kMITOct 31, 2026Scanned, no flagged issues
Sim
simstudioai
30kApache-2.0Nov 1, 2026Scanned, see report