xlsx

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
recalc.py

The apparent purpose is legitimate spreadsheet recalculation, but it uses a high-impact mechanism: writing and executing a LibreOffice application-level macro. The missing macro payload is the principal security concern and prevents verification of its behavior. As supplied, the fragment is also syntactically invalid and cannot run. No direct data theft or network exfiltration is visible in the provided portions, but the macro installation and execution should be treated as a security-sensitive operation until the complete macro content is reviewed.

Confidence: 96%Severity: 68%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:26 AM
Package URL
pkg:socket/skills-sh/appautomaton%2Fdocument-skills%2Fxlsx%2F@4c6734467ac6ebc598c9619f762484bbc27cc969658f8208878c8d0c8e52deb6