xlsx

This module is primarily a headless LibreOffice orchestration tool that injects and executes a LibreOffice Basic macro to recalculate and save a user-supplied workbook, then parses the rewritten file for Excel-like error tokens. No explicit data exfiltration or credential theft is evident in the provided fragment; however, it performs sensitive office-suite macro execution (high security sensitivity). Because the macro payload (RECALCULATE_MACRO) is not shown and external-link detection appears potentially incorrect (EXTERNAL_REF_RE compiled with no pattern), the supply-chain/malware likelihood cannot be fully verified. Treat this as a medium-to-high security risk pending inspection of the actual macro content and the office integration helpers (office.soffice).

This module is primarily a LibreOffice launcher that adds a temporary profile and environment modifications, but it also contains a high-risk optional pathway: it can write C source, compile a native shared library with gcc, and inject it into the soffice process via LD_PRELOAD. While no direct exfiltration is visible in the Python, the native shim content (missing/truncated in the snippet) is critical; until verified, this represents a substantial supply-chain security risk due to the ability to execute arbitrary native code within the soffice process context.