xlsx

Warn

Audited by Socket on Nov 8, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/office/soffice.py

The file drinks a high-risk pattern where C code is written at runtime, compiled with gcc, and preloaded into the soffice process via LD_PRELOAD. Because the _SHIM_SOURCE is not provided, the exact payload cannot be confirmed; therefore, the code should be reviewed in isolation and subjected to rigorous runtime validation and integrity checks before use.

Confidence: 62%Severity: 78%
Audit Metadata
Analyzed At
Nov 8, 2026, 09:37 PM
Package URL
pkg:socket/skills-sh/anthropics%2Fskills%2Fxlsx%2F@8c85f6cfdca12e4cb728af6a858660cf168b4716f2e92c46c3f159fdd917fcf8