xlsx

SUSPICIOUS due to install/execution trust rather than purpose mismatch. The spreadsheet capabilities are coherent and proportionate, and there is no visible credential or network exfiltration path, but the required recalc.py script is an unverifiable local executable dependency with unknown provenance, which raises the overall security risk.