docx

This module conditionally performs runtime native compilation and injects the resulting shared object into the LibreOffice (soffice) subprocess via LD_PRELOAD. While no explicit exfiltration/credential theft is visible in the Python fragment, the injection technique is inherently high-impact and the actual shim behavior cannot be verified because _SHIM_SOURCE is not included. The package should be reviewed by inspecting _SHIM_SOURCE, the emitted .so, and its runtime effects under sandboxed testing before trust is granted.

This module is a document-processing utility that performs headless LibreOffice execution by installing and running a LibreOffice Basic macro from a runtime-writable profile in /tmp. The wrapper itself shows no network access or credential theft, but it provides a strong code-execution primitive (macro write + macro execution via UNO script). Because the macro payload (ACCEPT_CHANGES_MACRO) is not present in the provided fragment, its behavior cannot be verified; if that payload were malicious or tampered, the impact could be substantial within the LibreOffice execution context. Additionally, timeout handling may misreport success, which can undermine output integrity.