xlsx
Audited by Socket on Mar 5, 2026
1 alert found:
AnomalyThis module's intended purpose is to automate LibreOffice to recalculate spreadsheet formulas and report Excel error cells. The code writes a LibreOffice macro into the user's macro directory and triggers execution of that macro via soffice. That pattern allows arbitrary code execution inside LibreOffice if the macro content is malicious or can be tampered with. The provided snippet is syntactically invalid and missing the macro contents, so maliciousness cannot be proven from this fragment alone. Treat the behavior as potentially dangerous: if RECALCULATE_MACRO contains only safe recalc logic the risk is small, but if an attacker can modify the macro or if the package supplies a malicious macro, it could execute arbitrary actions on the host. Recommend not running this code untrusted and review the actual macro content and get_soffice_env() implementation before use.